Windows Proxy Via Registry Modification

The analytic detects modifications to Windows Proxy settings via registry keys, specifically focusing on the path `*\System\CurrentControlSet\Services\PortProxy\v4tov4\tcp*`. This activity is significant because `netsh.exe` can be used to establish a persistent proxy, potentially allowing an attacker to execute a helper DLL whenever `netsh.exe` runs. This could enable persistence, network configuration manipulation, data exfiltration, or further system compromise.