communication_to_itar_countries

Explanation

This Netography Fusion Portal event is designed to identify any connections made to countries listed under US Code 22 CFR § 126.1 “Prohibited exports, imports, and sales to or from certain countries.”

What to Look For

Depending on your organization's international footprint, outbound connections to countries on this list may be unexpected, and may represent suspicious or malicious activity. Examine logs on the endpoint to determine whether unauthorized access has occurred.