New Port Forwarding Rule Added Via Netsh.EXE — Detection Rule

Detects the execution of netsh commands that configure a new port forwarding (PortProxy) rule

Read the full analysis on IntelFusions