
EvlWatcher
Protected against RDP-Brute forcers. It installs a service which scans the event log for anomalies every 30 seconds (by default). When the service finds out that someone is taunting your server with RDP-login attempts, it adds the remote IP to a generic rule in the windows firewall which locks out the attacker. After 2 hours (default), the ban will be lifted, i.e. the IP will be removed from the rule.