Evidence
Evidence
One observation, and where it came from.
connections every 60s ± 2s for 96 minutes — machine-timed, not human
This observation is part of a written scenario. It did not come off a real network, and nothing on this deployment did.
{
"kind": "security",
"detection_type": "regular_interval",
"principal": "ws-0148->198.51.100.74:8443",
"source_address": null,
"asset": null,
"confidence": 0.88
}