Command Center

Current investigation

Periodic outbound connections from office workstation

Cyberattack / intrusion · SG Highway, Ahmedabad

IT administrator A. Desai (synthetic) of Kestrel Logistics (synthetic), SG Highway, Ahmedabad reports suspicious network activity first noticed on 12 September 2026. The firewall shows workstation 10.0.4.17 connecting to 203.0.113.45 every 60 seconds outside office hours. DNS queries were made to update-cdn.example.net, a domain the company does not use. A packet capture from the office gateway (office-gw-0912.pcapng) is attached. No ransom note or data loss has been confirmed.

Open

5

To review

5

High priority

2

Unchecked files

11