Log analysis · Domain 4
Investigate outbound connections
Domain 4: Security OperationsLog analysis
Copperline Logistics sends patch downloads through its internal update server at 10.0.0.20 overnight, so office PCs rarely talk to the internet on their own schedule. Review this firewall window and identify traffic that warrants endpoint investigation.