Potential Recon Activity Via Nltest.EXE — Detection Rule

Detects nltest commands that can be used for information discovery

Read the full analysis on IntelFusions