LoFP / T1595.001

T1595.001

Title	Tags
various, could be noisy depending on processes in the organization and sysmon configuration used. adjusted port/dest count thresholds as needed.	t1595 T1595.001 t1595.002 endpoint splunk