Excessive number of failed connections from 127.0.0.1

Ran the following Advanced Hunting KQL Was due to Labtech upgrades SrcIpAddr 127.0.0.1? SrcPortNumber 59615? DstIpAddr 127.0.0.1? DstPortNumber 42013? SrcDvcId 7 SrcUsername nt authority\system NetworkProtocol TCP? EventOriginalResultDetails […]