Port Forwarding Activity Via SSH.EXE — Detection Rule

Detects port forwarding activity via SSH.exe

Read the full analysis on IntelFusions