New Network Trace Capture Started Via Netsh.EXE

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects the execution of netsh with the "trace" flag in order to start a network capture