MAC Flapping Detected
This detection identifies a single MAC address rapidly appearing on multiple switch ports within a short time frame. This behavior, known as MAC flapping, is a strong indicator of a network loop, which can cause broadcast storms and degrade or disable network services.
Microsoft Sentinel (KQL)
