# port\_8443\_scanning\_outbound

**Explanation**

The port\_8443\_scanning\_outbound NDM detects outbound scans on port 8443 from the customer’s network.

**What to Look For**

To examine the results of the port\_8443\_scanning\_outbound NDM, check the network logs for outbound traffic on port 8443 from an internal source IP. Check the endpoint logs for any suspicious activity related to scanning or port 8443. This event indicates a potential security threat and should be investigated further to prevent any malicious activity.

**Related MITRE ATT\&CK Categories**

[Discovery: Network Service Discovery, Technique T1046 - Enterprise](https://attack.mitre.org/techniques/T1046)

[Reconnaissance: Active Scanning, Technique T1595 - Enterprise](https://attack.mitre.org/techniques/T1595)