Malicious IP Network Connections Detection

This detection identifies network connections to specific malicious IP addresses known as indicators of compromise, related to malicious activities.

Microsoft Sentinel (KQL)