RDP Port Forwarding Rule Added Via Netsh.EXE — Detection Rule

Detects the execution of netsh to configure a port forwarding of port 3389 (RDP) rule

Read the full analysis on IntelFusions