Can NetSenX detect threats in encrypted traffic?

Yes, from metadata: encrypted traffic is never decrypted. NetSenX looks at flow metadata and a few protocol fields — timing, volume, destinations and the TLSTLS: Transport Layer Security. The encryption that protects most internet traffic, such as HTTPS. handshake — so beaconing and unusual data transfers stay visible without breaking encryption or reading content.

This answer also appears, with more context, here: NetSenX home page

← All 40 questions on Encryption and encrypted trafficAll topics