From 73dacdf456fc5f98e93ab30e9466b7ad41a9962e Mon Sep 17 00:00:00 2001 From: shabaz-github <104413086+shabaz-github@users.noreply.github.com> Date: Wed, 21 Jun 2023 18:46:32 +0530 Subject: [PATCH] Update Azure Firewall - Uncommon Port for Organization.yaml --- .../Azure Firewall - Uncommon Port for Organization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Solutions/Azure Firewall/Hunting Queries/Azure Firewall - Uncommon Port for Organization.yaml b/Solutions/Azure Firewall/Hunting Queries/Azure Firewall - Uncommon Port for Organization.yaml index 7e8211fa54..79968abf15 100644 --- a/Solutions/Azure Firewall/Hunting Queries/Azure Firewall - Uncommon Port for Organization.yaml +++ b/Solutions/Azure Firewall/Hunting Queries/Azure Firewall - Uncommon Port for Organization.yaml @@ -1,7 +1,7 @@ id: 8812a547-13e6-4d0c-b38d-476fb7351c52 name: Uncommon Port for Organization description: | - 'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used on any machine in the organization.' + 'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used.' requiredDataConnectors: - connectorId: AzureFirewall dataTypes: