What can a network sensor tell the board that antivirus cannot?

What happens between computers, which antivirus does not watch. Antivirus and endpoint detection and response (EDREDR: endpoint detection and response. Security software installed on each computer that watches what happens on that machine.) look inside each machine for malicious files and behaviour. A network sensor looks at the connections instead: a PC that contacts an unknown server every few minutes, a workstation that suddenly logs in to many others, a server that sends far more data out at night than it usually does. Those are the steps attackers take after getting in, often with legitimate tools that antivirus lets pass. NetSenX reports them on every plan, Free included, and explains each alert in plain language. It does not replace antivirus or EDR: it cannot see a file being encrypted inside a laptop or a folder being copied to a USB stick. The two views together leave fewer blind spots.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

← All 40 questions on For the board and financeAll topics