Multi-country automated source IPs sweeping multiple financial web services
Detects clusters of high-volume external source IPs from multiple countries sweeping the same financial web services within an hour.
Microsoft Sentinel (KQL)

Detects clusters of high-volume external source IPs from multiple countries sweeping the same financial web services within an hour.

Already have an account?