OS X Listening Application

Info Log Correlation Engine Plugin ID 800520

Synopsis

The OS X application firewall logged an open port and corresponding service.

Description

The LCE observed a log which indicates that this system is an OS X system running an application firewall which has allowed a running process to open a socket and listen for connections.

Plugin Details

Severity: Info

ID: 800520

File Name: 800520.prm

Family: Generic

Risk Information

Risk Factor: Info