New External Java RMI Connection

The Java Remote Method Invocation (RMI) protocol facilitates communication between distributed Java systems. RMI connections over the internet are uncommon and can be indicators of compromise. Attack tools and techniques that leverage RMI for remote code execution (RCE) are available to attackers with any skill level. A victim can download a malicious payload through an RMI connection to an attacker-controlled server.

The system might change the risk score for this detection.