Tor Relay Connection Detection

Shivam Malaviya@Shviam

•updated Jul 4, 2025•1•1•72

This detection identifies network connections to known Tor exit nodes using a CSV feed of Tor relay IP addresses, helping detect potential data exfiltration or command and control communications through Tor.