Hi,
ATP is giving me a detection of C2/Generic-A from a User/Host that is a public IP that has nothing to do with our network.
Any advise on where I should start investigating?
Thanks
This thread was automatically locked due to age.
Hi Vilic,
Thanks - that's exactly what the problem was. The IP address was the one mentioned by all the other posters in that discussion.
Still not sure how the alert happened in that I thought ATP dealt with outgoing connections, but I'll switch across to the existing thread.
Thanks again.