examples:

• description: "Execute Windows TCP Connections on High Ports and observe the unusual behavior" command: "Windows TCP Connections on High Ports"

Windows TCP Connections on High Ports

Windows uses random high service ports for a variety of functions.

Without knowing this, these connections seem malicious but should be considered benign without a second source of suspicion.

Contributed by Ductape and Dreams