In case anyone is unfamiliar with Cortex XDR, this is not a joke or exaggeration. You too could have these useless KPIs in your org.
##
CORTEX XDRThis external entity was accessed using 0 distinct ports. Based on our machine learning models, this connection was flagged as suspicious
It was ssh... I'm using SSH.