Microsoft’s detective

Just over a year ago, when I went through the logs of an IPS located at a dedicated and internal network (not facing the Internet or any external networks), I saw DHCP activity. Since this is a servers based environment, presumably they all should have a fixed IP address, so any DHCP activity may indicate ...