[rule] severity = "high" name = "4104" message = "Excute Remote Command"