# outbound\_snmp\_sweep

**Explanation**

outbound\_snmp\_sweep is a security event in the Netography Fusion Portal that is triggered when an SNMP sweep is detected leaving the customer network. SNMP, or Simple Network Management Protocol, is a protocol used to manage and monitor network devices.

**What to Look For**

To examine the results of the outbound\_snmp\_sweep event, look for any devices on the network that may be responsible for the sweep. This could include routers, servers, or other network devices. Also, examine any endpoints that may be involved in the sweep to determine if they have been compromised. It is important to analyze and address this event to prevent potential attacks and ensure the security of your network.

**Related MITRE ATT\&CK Categories**

[Discovery: Network Service Discovery, Technique T1046 - Enterprise](https://attack.mitre.org/techniques/T1046)

[Reconnaissance: Active Scanning, Technique T1595 - Enterprise](https://attack.mitre.org/techniques/T1595)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/detection-models/library/misconfiguration/outbound_snmp_sweep.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.