Alerts related to data source "Third-Party Firewalls".
A Torrent client was detected on a host
Abnormal Communication to a Rare Domain
Abnormal RDP session to a remote host from a rarely seen host
Abnormal Recurring Communications to a Rare Domain
Failed Connections
Large Upload (HTTPS)
Large Upload (SMTP)
New Administrative Behavior
New FTP Server
Port Scan
Port Sweep
Rare AppID usage to a rare destination
Rare process created an SSH session to an uncommon cloud resource
Rare process created an SSH session to an uncommon external host
Rare RDP session to a remote host
Rare SMB session to a remote host
Rare SMTP/S Session
Recurring access to rare domain
Recurring access to rare IP
Recurring rare domain access to dynamic DNS domain
Spam Bot Traffic
Suspicious SMB connection from domain controller
Uncommon SSH session was established
Was this helpful?
