Identifying malicious Remote Desktop Protocol (RDP) connections with Elastic Security