For the complete documentation index, see llms.txt. This page is also available as Markdown.
REC01 - Suspicious Port Scan
This alert triggers when detecting an internal host that is performing a serialized open port discovery on a target host, potentially indicating reconnaissance activities.
