Skip to content
Threat Feed
Subscribe

Tag

Netflow

1 brief RSS
high advisory

Correlation of First Seen Network Flow Exporters with Suspicious Source Activity

This detection identifies potential defense evasion where a newly observed network flow exporter subsequently acts as the source of suspicious security alerts within a 30-minute window.

defense-evasion network-security netflow monitoring
1t