New Port Forwarding Rule Added Via Netsh.EXE (322ed9ec-fcab-4f67-9a34-e7c6aef43614)
Detects the execution of netsh commands that configure a new port forwarding (PortProxy) rule
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) | Attack Pattern | New Port Forwarding Rule Added Via Netsh.EXE (322ed9ec-fcab-4f67-9a34-e7c6aef43614) | Sigma-Rules | 1 |