Beyond detection, RDP Recognizers can analyze sessions to determine their origin, duration, and the actions performed during the session.

But then, the reports started. Artists claimed that when they used the Recognizer, the remote desktop wouldn't just show their workspace. It would show folders they hadn't created. It would play audio files of whispers in languages they didn't speak. One night, a junior compositor claimed the software "recognized" him back, displaying his own webcam feed on the remote server, even though his camera was unplugged.

As of the , Microsoft has significantly changed how RDP files are handled to combat tools like this.