// Investigation

Hunt console

Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.

hunt.queryREADY
Try

Result profile

1

event matches

Severity

  • Critical0
  • High0
  • Medium0
  • Low0
  • Info1

Applied filters

  • dstip = 142.147.113.62

Matches

Newest first.

Timestamp (UTC)SeverityEvent typeUserSource IPMessage
InfoNetwork Allow10.4.12.24allow tcp 10.4.12.24:4088 -> 142.147.113.62:443 policy="egress-standard"