Threat Hunt

Query builder and flow search analysis

5 flows matching

TIME	SOURCE IP	DEST IP	PROTO	BYTES	SCORE	LABEL
22:14:03	`10.0.1.5`	`8.8.8.8`	UDP	4,520	0.94	DDoS
22:13:58	`10.0.1.5`	`evil.com`	TCP	1,240	0.87	C2
22:13:42	`192.168.1.1`	`10.0.1.100`	TCP	890	0.72	Scan
22:13:30	`10.0.1.12`	`10.0.1.1`	ICMP	128	0.15	Normal
22:13:15	`10.0.1.8`	`185.220.101.4`	TCP	3,200	0.81	C2