Ugh, that was real easy. I just went to the search builder and tracked down the TCPTrafficAudit event and sure enough, the DestinationPort field was right there, in front of my face.
TY for your response!
Ugh, that was real easy. I just went to the search builder and tracked down the TCPTrafficAudit event and sure enough, the DestinationPort field was right there, in front of my face.
TY for your response!