AdamTX79

Hello. I have the same exact threat on one of my storage servers. Have no idea where this action comes from and need to find out what to do besides running full scans. This user is outside of our company and I am assuming tried to do something that was not allowed during a remote session and was blocked. I need to know what triggers this and what to do to correct it. Thank you