Implement Check Local to Internet Connection

[lucaderi]

This is to request the implementation of a new behavioural check that takes a list of IP (CIDR):

• A: local internal network devices. Example 192.168.1.0/24
• B: corporate network devices (e.g. routers and switches). Example 172.16.0.0/16
• C whitelisted networks that A and B can access. Example 192.168.4.0/24

An alert is triggered for every:

• outbound connection from a client host belonging to A talks with a public IP address not listed in C.
• outbound connection from a client host belonging to A talks with any address listed in B and not listed in C.
• outbound connection from a client host belonging to B talks with a host not listed in C.