NEW_SERVICE

This alert is triggered if a new software service appears on a server and some traffic to this service is detected.

Characteristics

Name: New service detected

Type: new objects

Status (default): disabled

Detector: SQL-based

Message

“A new service has been detected.”

“Software service *software_service_name* was used for connecting to server *IP_address* .”

Detector parameter

This alert has no parameters.