Assert every egress attempt went to an allowed host. allowed matches a host (exact string or regex), or a specific host:port. Any attempt outside the allowlist fails, naming the offender — exfil / unexpected-registry detection.
allowed
host:port
Assert every egress attempt went to an allowed host.
allowedmatches a host (exact string or regex), or a specifichost:port. Any attempt outside the allowlist fails, naming the offender — exfil / unexpected-registry detection.