PUA - NPS Tunneling Tool Execution (68d37776-61db-42f5-bf54-27e87072d17e)
Detects the use of NPS, a port forwarding and intranet penetration proxy server
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) | Attack Pattern | PUA - NPS Tunneling Tool Execution (68d37776-61db-42f5-bf54-27e87072d17e) | Sigma-Rules | 1 |