# Can a rogue device plugged into our network be detected?

Often, if it talks. A small computer or Wi-Fi bridge hidden under a desk has to reach the attacker, so it shows up as a host making outside connections, often at regular intervals. Check your switches for unknown MAC addresses and use port security or 802.1X where you can. NetSenX sees the traffic of hosts on monitored segments and flags beaconing and unusual connections; a device that stays silent, or sits on a segment you do not monitor, stays out of view.

FAQ: [Attack techniques explained](https://netsenx.com/en/faq/attacks) · https://netsenx.com/en/faq/can-a-rogue-device-on-our-network-be-detected

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/is-someone-inside-your-network

## Related questions

- [What is MITRE ATT&CK?](https://netsenx.com/en/faq/what-is-mitre-attack)
- [What is the difference between a tactic, a technique and a procedure (TTP)?](https://netsenx.com/en/faq/difference-between-a-tactic-a-technique-and-a-procedure)
- [What is reconnaissance in a cyberattack?](https://netsenx.com/en/faq/what-is-reconnaissance-in-a-cyberattack)
- [What is resource development in MITRE ATT&CK?](https://netsenx.com/en/faq/what-is-resource-development-in-mitre-attack)
- [What is initial access in a cyberattack?](https://netsenx.com/en/faq/what-is-initial-access)