Skip to content
Threat Feed

Tag

Network_connection

1 brief RSS
high advisory

Network Connections from Processes in Suspicious Windows Directories

Detection of network connections originating from processes running within suspicious Windows directories, indicating potential malware execution and command-and-control activity.

Splunk Enterprise +2 network_connection windows suspicious_location
2r 1t