Network Communication

Network Communication captures outbound or inbound communication initiated by an application or mobile device, including the domains contacted, protocols used, and session metadata associated with the communication.

Monitoring network communication enables defenders to identify command-and-control traffic, data exfiltration, or suspicious communication patterns originating from mobile applications.

Examples

  • Connections to previously unseen domains
  • Repeated communication with suspicious infrastructure
  • Communication immediately following application installation

Collection Methods

  • Mobile VPN telemetry
  • Secure web gateway logs
  • Network detection and response (NDR)
  • Mobile EDR network monitoring
ID: DC0113
Domains: Mobile
Version: 2.1
Created: 13 March 2023
Last Modified: 11 March 2026

Log Sources

Name Channel
Application Vetting None

Detection Strategy