5 ms·
And if the attacker is smart and uses active times to hide his activity, then monitoring active connections is a smart way, no?
by hutzlibu 3y ago
And if the attacker is smart and uses active times to hide his activity, then monitoring active connections is a smart way, no?
- Zetobal 3y agoIt's nice to have especially if you need to find a rogue employee but if you catch a bad actor only when he is already exfiltrating, you failed at your job.
- hutzlibu 3y agoSure, but when some damage is already done, you can and must still prevent greater damage. And you have to assume, that one day something fails. So - "monitoring active connections is a smart way, no?"