Event ID 9004001 — Connection succeeded
Description
Connection succeeded
Fields #
| Name | Description |
|---|---|
DeviceId | — |
Timestamp | — |
RemoteIP | — |
RemotePort | — |
RemoteUrl | — |
Protocol | — |
InitiatingProcessFileName | — |
Detection Patterns #
References #
- Microsoft Defender XDR — advanced hunting reference https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-devicenetworkevents-table