Detection of Bidirectional Communication

ID: DET0700
Domains: Mobile
Analytics: AN1816, AN1817
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1816

Application vetting services may provide a list of connections made or received by an application, or a list of domains contacted by the application.
Many properly configured firewalls may naturally block bidirectional command and control traffic.

Log Sources
Data Component Name Channel
Network Communication (DC0113) Application Vetting None
Network Connection Creation (DC0082) Network Traffic None

AN1817

Application vetting services may provide a list of connections made or received by an application, or a list of domains contacted by the application.
Many properly configured firewalls may naturally block bidirectional command and control traffic.

Log Sources
Data Component Name Channel
Network Communication (DC0113) Application Vetting None
Network Connection Creation (DC0082) Network Traffic None