Public IP Connections from Wi-Fi Devices
This rule identifies devices connected to Wi-Fi networks that have successfully established connections to public IP addresses. It lists details such as the device name, network adapter information (name, status, vendor), the public IP address connected to, and the first/last seen connection times, along with a count of connections. The primary goal is to provide visibility into Wi-Fi device network configurations and their external communication.
Microsoft Sentinel (KQL)
