Hello,
I've had this problem even before where FireSIGHT was indicating this message from a host. I did a full scan to the host with its anti-virus but nothing was captured.
| CnC Connected |
Intrusion Event - malware-cnc |
Now I'm seeing this message again from 3 hosts, and one of the hosts is the public DNS (from ISP). I don't know what to do because the option "Scan Host" is not available in my FireSIGHT.
Thank you.
Enid.
