winwb by Pablo Delgado on May 19, 2017 in Previous article Detecting Outbound connections Pt. 1 – Sysmon