All Detections

Multi-country automated source IPs sweeping multiple financial web services

avatar
Arnold Chan@slaz
updated today000

Detects clusters of high-volume external source IPs from multiple countries sweeping the same financial web services within an hour.

Microsoft Sentinel (KQL)