I am new to NTA.
The other day I looked at the Top 10 network traffic and noticed a Unknown.servercentral.net.
Checked it out and it was displayed as a ransomware site. Blocked in the firewall.
I want to create a scan that monitors all site that we connect to so I can remove the ones from the report list that are valid.
I have no clue how to do this and would greatly appreciate some guidance.
Training resources, threads that address this etc.
Thanks