Answered: While working on threat detection…

Computer Networking: A Top-Down Approach (7th Edition)

7th Edition

ISBN:9780133594140

Author:James Kurose, Keith Ross

Publisher:James Kurose, Keith Ross

Chapter1: Computer Networks And The Internet

Section: Chapter Questions

Problem R1RQ: What is the difference between a host and an end system? List several different types of end...

See similar textbooks

Related questions

Concept explainers

Question

While working on threat detection content development you observe some odd activity in the firewall logs. You notice a number of allowed HTTP connections outbound from a client's environment (Client IP - 192.168.10.15) towards a Russian IP address - 185.211.245.198. After further investigation you notice these HTTP connections seem to happen on a regular basis, even during off hours, in what looks to be a pattern. You know that this client's IP belongs to one of their user subnets and that this client has no business with or in Russia. We have no IDS or Anti-virus alerts for this device at this time.

Please write up an escalation case communicating the observations, level of concern, and recommended actions to the client.

Expert Solution

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-engineering and related others by exploring similar questions and additional content below.

Similar questions