How do I know if my business network has been compromised?
Look for behaviour that has changed: new outbound destinations, connections at regular intervals, sign-ins at odd hours, one machine connecting to many others, and unusual outbound volume. Each can be checked in firewall, DNS and directory logs. Two or more together are worth an investigation; continuous network monitoring watches for all of them every day, not only on the day you look.
We use strictly necessary storage to run this site. With your permission, we also use PostHog, hosted in the EU, to count visits and page views so we can improve the site. Nothing is measured until you allow it, and you can change your choice at any time. Details in our cookie policy.