Detect anomalous outbound network traffic

You can detect suspicious/ anomalous traffic using this feature even in egress-policy:audit mode.

To access this feature switch to the Recommendations tab on your Insights page

• Anomaly detection feature creates a machine learning model of outbound network calls by analyzing the historical data of the same workflow in previous runs

• Once the baseline is established, any anomalous outbound destinations are flagged on the insights page, triggering real-time alerts

• You can view the list of all anomalous outbound network traffic in the All Detections page on the dashboard

For more details, refer to Anomalous Outbound Call Detection Using Machine Learning