New Outbound LDAP Connection

New connections to external LDAP servers are uncommon and can be indicators of compromise. Attack tools and techniques that leverage external LDAP servers are available to attackers with any skill level. External LDAP servers can deliver malicious payloads or enable other attacks, such as leaked credentials, command-and-control communication, or data exfiltration.

The system might change the risk score for this detection.