AKS Node Outbound Connection on Non-Standard Port
Detects when an Azure Kubernetes Service (AKS) worker node initiates an outbound connection to a public IP address over a non-standard or unexpected port. This could indicate data exfiltration using custom tools or protocols.
Microsoft Sentinel (KQL)
