port_62078_scanning_outbound

Explanation

This NDM detects scanning for open port 62078 outbound on the network.

What to Look For

To remediate or examine the problem, customers should look for any traffic attempting to scan outbound for port 62078. This could indicate an attempt to exploit a vulnerability on a device listening on that port. Customers should also investigate any devices on the network that are listening on port 62078 and ensure they are properly secured. Additionally, endpoint security measures should be in place to prevent unauthorized access to the network.

Related MITRE ATT&CK Categories

Network Service Discovery, Technique T1046 - Enterprise

Active Scanning, Technique T1595 - Enterprise