Reasons
- Further attacks within a short window, permanent ban applied based on indicators of persistence attacks.
- Observed on a single node, indicating non-distributed activity at time of detection.
No MITRE ATT&CK mappings available for this decision.
Evidence
- Nodes observed: 1
- Severity: HIGH
- TTL remaining: 1d 1h