rdp tempalte update

network/rdp-detect.yaml

@@ -13,45 +13,63 @@ network:
     read-size: 2048
 
     host:
-      - "{{Hostname}}"
       - "{{Host}}:3389"
+      - "{{Hostname}}"
 
     matchers:
+      - type: word
+        encoding: hex
+        words:
+          - "030000130ed"
+
       - type: word
         encoding: hex
         name: win2000
         words:
           - "0300000b06d00000123400"
+
       - type: word
         encoding: hex
         name: win2003
         words:
           - "030000130ed000001234000300080002000000"
+
       - type: word
         encoding: hex
         name: win2008
         words:
           - "030000130ed000001234000200080002000000"
+
       - type: word
         encoding: hex
         name: win7or2008R2
         words:
           - "030000130ed000001234000209080002000000"
+
       - type: word
         encoding: hex
         name: win2008R2DC
         words:
           - "030000130ed000001234000201080002000000"
+
       - type: word
         encoding: hex
         name: win10
         words:
           - "030000130ed00000123400021f080002000000"
+
       - type: word
         encoding: hex
         name: win2012R2OR8
         words:
           - "030000130ed00000123400020f080002000000"
+
+      - type: word
+        encoding: hex
+        name: win2012R2
+        words:
+          - "030000130ed00000123400020f080008000000"
+
       - type: word
         encoding: hex
         name: win2016