MSHTA Successful outgoing conneciton to public IP
Microsoft Secure Score added a recommendation to block outbound traffic from mshta.exe in Microsoft Defender for Endpoint. This reduces risk from attacks using mshta.exe, requires admin action to enable, and impacts compliance monitoring and data access.
Microsoft Sentinel (KQL)
