IDE Process Making Network Connections
Looks for various IDE processes making network connections direct to IP. Excludes private IP ranges but might need contextual exclusions too for environment
Microsoft Sentinel (KQL)

Looks for various IDE processes making network connections direct to IP. Excludes private IP ranges but might need contextual exclusions too for environment

Already have an account?