Between January and June this year Vectra, which uses artificial intelligence to spot suspicious activity on a network, detected 26,800 “suspicious” RDP behaviours among its customers, spread across more than 350 deployments.