Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
2
2
Categories
4
1
Platforms
4
Products / Services
1
1
1
1
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
Detects the addition of a new rule to the Windows firewall via netsh
Detects the addition of a new rule to the Windows firewall via netsh
Detects the addition of a new rule to the Windows firewall via netsh
Detects the addition of a new rule to the Windows firewall using the 'netsh.exe' command-line utility. This activity can indicate an adversary attempting to bypass network controls for C2 communications, lateral movement, or data exfiltration.