Suspicious Plink Port Forwarding — Detection Rule

Detects suspicious Plink tunnel port forwarding to a local port

Read the full analysis on IntelFusions