In order to check whether there are abnormal connections on the Windows host, an engineer can use the netstat command to view the currently active TCP connections on the host. The displayed results…

In order to check whether there are abnormal connections on the Windows host, an engineer can use the netstat command to view the currently active TCP connections on the host. The displayed results include the source and destination addresses of the TCP connections, source and destination port numbers, connection status, name of the process or application, etc. information.