hard20 pts · first answer countsnetwork-securitynetflow
Who started this connection?
A flow shows 10.1.1.20:443 ↔ 185.199.1.5:51544 with no handshake details. An analyst says the internal server connected out. What is more likely?
Discussion 0
Join free to post in the discussion.
Related questions
- IDS vs IPSCybersecurity Analyst
- What makes a firewall stateful?Cybersecurity Analyst
- The hidden last rule of a firewallCybersecurity Analyst
- Default port for SSHCybersecurity Analyst
- RDP open to the internetCybersecurity Analyst
- Why use a DMZCybersecurity Analyst
- Order of the TCP handshakeCybersecurity Analyst
- What runs on port 445Cybersecurity Analyst