Outbound Connection from Edge Device to Suspicious IP

Georg Lauenstein@gsec

•updated Mar 7, 2026•1•0•79

Detects outbound connections from network appliances to external IPs that may indicate command and control activity post-exploitation