Alert for Sketchy Public Services | Voters

Alert for Sketchy Public Services

Wolfgang Estgfaeller

I need a feature that alerts me if sketchy services are made publicly available by my clients, such as when dangerous firewall rules are created. This would help in monitoring and managing potential security risks more effectively.

Created by Autopilot

April 3, 2025

Matthiew Morin (Huntress)

Hi Wolfgang Estgfaeller, does the External Recon capability meet your needs for this? You can find it in the left-hand navigation by hovering over the "EDR" option and then selecting External Recon.

This will show you any publicly accessible ports associated with the Public IP addresses that your EDR agents are connecting from.