// Investigation
Hunt console
Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.
hunt.queryREADY
to run
Result profile
1
event matches
Severity
- Critical0
- High0
- Medium0
- Low1
- Info0
Applied filters
- dstip = 10.4.12.9
Matches
Newest first.
| Timestamp (UTC) | Severity | Event type | User | Source IP | Message |
|---|---|---|---|---|---|
| Low | Tls Negotiation | — | 203.0.113.44 | TLS 1.0 negotiated on inbound connection to 10.4.12.9:443 (cipher TLS_RSA_WITH_AES_128_CBC_SHA) |