Detect Suspicious Web Traffic Ports
This KQL query detects potential threats by analyzing recent network traffic logs for activity involving suspicious ports, using an external CSV list of historically exploited ports.
Microsoft Sentinel (KQL)
This KQL query detects potential threats by analyzing recent network traffic logs for activity involving suspicious ports, using an external CSV list of historically exploited ports.
Already have an account?