Traffic Stopped on Network Interface
No tarffic was detected on the interface for a period of time greater than the 'Inactive range' that was defined as part of interface configuration.
ID Number
9000016
Signature
-
MITRE ATT&CK Technique
-
Severity
medium
Recommendations/Investigative actions
Need to call the POC (Point of Contact) at the site and ask if some kind of activity was performed or he is aware for a network bug. In addition, look for a relevant cyber attack rules at the same time, it can be an attampt of the attacker to hide his tracks