communication_to_itar_countries
Explanation
This Netography Fusion Portal event is designed to identify any connections made to countries listed under US Code 22 CFR § 126.1 “Prohibited exports, imports, and sales to or from certain countries.”
What to Look For
Depending on your organization's international footprint, outbound connections to countries on this list may be unexpected, and may represent suspicious or malicious activity. Examine logs on the endpoint to determine whether unauthorized access has occurred.
Updated about 1 month ago