REC01 - Suspicious Port Scan

This alert triggers when detecting an internal host that is performing a serialized open port discovery on a target host, potentially indicating reconnaissance activities.