Network destinations
This category groups related risk explanations. A finding is a reason to review the activity and its context, not proof that a breach occurred.
Risk types
Section titled “Risk types”- Calls to raw IP addresses
A tool call reaches an IPv4 address directly, and the address is classified against a built-in set of cloud-provider ranges.
Event categories
Section titled “Event categories”These event category values map to this library category: unexpected_network_destination. Use the rule index to find the explanation for a specific rule ID.