10. Security Tools Ports

Security monitoring tools—like Splunk, Elastic, Defender, and CrowdStrike—use defined ports for log ingestion, agent communication, dashboards, and API calls. This dataset helps SOC teams, MDR/XDR providers, and SIEM architects design stable logging pipelines, validate agent health, and identify insecure management interfaces. PortProtocolServiceDescription 9997TCPSplunk ForwarderIngest from UF 8089TCPSplunk mgmtAPI & mgmt 514UDPSyslogLog ingestion 6514TCPSyslog TLSSecure log...