Detection of One-Way Communication

ID: DET0610
Domains: Mobile
Analytics: AN1663, AN1664
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1663

Application vetting services may provide a list of connections made or received by an application, or a list of domains contacted by the application.
Many properly configured firewalls may naturally block one-way command and control traffic.

Log Sources
Data Component Name Channel
Network Communication (DC0113) Application Vetting None
Network Connection Creation (DC0082) Network Traffic None

AN1664

Application vetting services may provide a list of connections made or received by an application, or a list of domains contacted by the application.
Many properly configured firewalls may naturally block one-way command and control traffic.

Log Sources
Data Component Name Channel
Network Communication (DC0113) Application Vetting None
Network Connection Creation (DC0082) Network Traffic None