D
Claude · protocol · ms-wbt-server
RDP is open on the LAN.
Mnemosyne exposes tcp/3389 (RDP). On a trusted LAN behind Tailscale this is usually fine, but RDP has a long history of brute-force pain and should be NLA-enforced.
Worth a look
- Confirm Network Level Authentication is on. Consider gating RDP behind Tailscale ACLs only.