how u came to know its not communicating to local machine wat is ur action how u came to know its already communicated network file transfred, file size, (wireshark) Recent alerts on Qradar have u created any Dashboard, reports. How did u write and query for that how u came to know IP black listed If IP is not listed in Blacklisted wat u will do (add or not) there is problem in my system its affected by the malware how u will identify? in Last one hour who u will get logs from firewall to qradar
