RegAsm.EXE Initiating Network Connection To Public IP (0531e43a-d77d-47c2-b89f-5fe50321c805)

Detects "RegAsm.exe" initiating a network connection to public IP adresses

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Regsvcs/Regasm - T1218.009 (c48a67ee-b657-45c1-91bf-6cdbe27205f8)	Attack Pattern	RegAsm.EXE Initiating Network Connection To Public IP (0531e43a-d77d-47c2-b89f-5fe50321c805)	Sigma-Rules	1
Regsvcs/Regasm - T1218.009 (c48a67ee-b657-45c1-91bf-6cdbe27205f8)	Attack Pattern	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	2