Netskope Threat Labs

POLICY-OTHER OWASP Amass default User-Agent recon traffic detected

IPS-SWG

1 SID: 60727

First seen
October 2023
Last seen
March 2026

Detects the default user agent of the OWASP Amass reconnaissance tool. Amass enumerates external assets and subdomains, so this traffic usually signals security scanning or reconnaissance against the network.