Elastic Windows Event Explorer
Channel - Microsoft-Windows-TerminalServices-RDPClient/Analytic
Publishers
Microsoft-Windows-TerminalServices-ClientActiveXCore