Managed Sentinel – Alert 227
Alert ID | MS-A227 |
Alert Name | Internal hosts generating firewall denials |
Description | This alert identifies the top 25 internal hosts generating firewall denials. The denials may indicate an issue with the internal hosts or missing firewall rules. |
Severity Level | Low |
Threat Indicator | |
MITRE ATT&CK Tactics | Discovery |
Log sources | IP Tables |
False Positives | |
Recommendations |