SentinelOne THP
SentinelOne Threat Hunting Professional (THP S1-301)
Attack Analysis Anomaly DetectionEnglish
Exam overviewPractice session
An analyst notices several endpoints connecting to the same external IP on port 4444 at regular 60-second intervals. Which threat hunting concept BEST describes this behavioral pattern?
Loading your practice session…