It can be challenging to find out what has been connecting to the domains or ip detected by the sensor.
Using something like packetbeat helps but it, requires something else to be installed and you still have to dig through the logs to get more information.

So to make things quicker and easier can the sensor also log the full path and process name that is making the connection.