• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    CATO Networks - Blocked URL Access

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Nicholas Isakson@nisakson2000
    •updated Feb 3, 2026•4•0•57

    This query identifies URL access attempts that were blocked by CATO Networks security policies, based on logs in CommonSecurityLog. It allows for filtering by specific devices or target URLs.

    Microsoft Sentinel (KQL)

    Tags

    TA0001 - Initial AccessTA0011 - Command and ControlT1189 - Drive-by CompromiseT1071.001 - Web ProtocolsNetwork Connection BlockedHTTP RequestProxy Request BlockedNetwork GenericGeneric Security Tool Logkql

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?