Dfsvc.EXE Network Connection To Non-Local IPs — Detection Rule
Detects network connections from "dfsvc.exe" used to handled ClickOnce applications to non-local IPs
Detects network connections from "dfsvc.exe" used to handled ClickOnce applications to non-local IPs