Managed Sentinel – Alert 228
Alert ID | MS-A228 |
Alert Name | IP addresses with open ports attacked from Internet |
Description | This alert indicates the top 25 internal computers with exposed ports to the Internet and the type and number of attacks identified by Snort in the last 24 hours. |
Severity Level | Informational |
Threat Indicator | |
MITRE ATT&CK Tactics | Discovery |
Log sources | Snort |
False Positives | |
Recommendations |