Azure Arc Metadata Request

Ankit Mehta@Secvyn

•updated Jun 30, 2026•2•0•2

Detects processes making HTTP/HTTPS requests to localhost on ports 40341 or 40342 for '/metadata'. This pattern can indicate local service discovery, inter-process communication, or potentially malicious activity attempting to interact with local services, possibly for credential access or privilege escalation.