• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Check critical ports opened to the entire internet

    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Azure Sentinel@AzureSentinel
    •updated Jun 17, 2025•16•0•178

    'Discover all critical ports from a list having rules like 'Any' for sourceIp, which means that they are opened to everyone. Critial ports should not be opened to everyone, and should be filtered.'

    Microsoft Sentinel (KQL)

    Tags

    TA0001 - Initial AccessT1190 - Exploit Public-Facing ApplicationT1590.006 - Network Security AppliancesT1596.005 - Scan DatabasesTA0043 - ReconnaissanceT1595.002 - Vulnerability ScanningNetwork Connection InboundNetwork Connection AllowedNetwork Connection OutboundNetwork Connection BlockedNetwork ConnectionFirewall EventAzureAzure Monitor Logskqltactic:InitialAccess

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?