Inound connection identified as Outbound by Microsoft Sentinel

Nimantha Deshappriya 21 Reputation points
2022-10-27T03:53:39.813+00:00

I have noticed that there are several outbound connections in the overview page.

254517-image.png

However, having analyzed the traffic, I realized that inbound traffic labeled as outbound traffic.
Note: I have removed the destination IPs as they are internal public IPs.
254544-image.png

Can you please advise me?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,025 questions
0 comments No comments
{count} votes