Skip to content

Network destinations

This category groups related risk explanations. A finding is a reason to review the activity and its context, not proof that a breach occurred.

  • Calls to raw IP addresses

    A tool call reaches an IPv4 address directly, and the address is classified against a built-in set of cloud-provider ranges.

These event category values map to this library category: unexpected_network_destination. Use the rule index to find the explanation for a specific rule ID.