This alert is triggered if a new software service appears on a server and some traffic to this service is detected.
Name: New service detected
Type: new objects
Status (default): disabled
“A new service has been detected.”
“Software service *software_service_name* was used for connecting to server *IP_address* .”
This alert has no parameters.