# How do I know if my business network has been compromised?

Look for behaviour that has changed: new outbound destinations, connections at regular intervals, sign-ins at odd hours, one machine connecting to many others, and unusual outbound volume. Each can be checked in firewall, DNS and directory logs. Two or more together are worth an investigation; continuous network monitoring watches for all of them every day, not only on the day you look.

FAQ: [Have I been hacked?](https://netsenx.com/en/faq/signs) · https://netsenx.com/en/faq/how-do-i-know-if-my-business-network-has-been-compromised

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/detect-lateral-movement-c2-beaconing

## Related questions

- [Can an attacker stay inside a network for years without being noticed?](https://netsenx.com/en/faq/can-an-attacker-stay-inside-a-network-for-years-without-being-noticed)
- [What free checks can I run today?](https://netsenx.com/en/faq/what-free-checks-can-i-run-today)
- [Does NetSenX replace antivirus or EDR?](https://netsenx.com/en/faq/does-netsenx-replace-antivirus-or-edr)
- [Can my small business be hacked without me knowing?](https://netsenx.com/en/faq/can-my-small-business-be-hacked-without-me-knowing)
- [If one device on our network is hacked, are the others at risk?](https://netsenx.com/en/faq/if-one-device-is-hacked-are-the-others-at-risk)