What does NetSenX give us during an incident?

Evidence and timing, not extra hands. During an incident NetSenX gives you alerts for beaconing, scanning, lateral movement and unusual outbound data volume, on every plan, each with a plain-language reason, the hosts involved, destinations, volumes and times, and the MITRE ATT&CK technique where one applies; the network map of who talks to whom; an audit log of alerts and analyst decisions; and tracking of the NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. Article 23 deadlines, with a GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679). Article 33 notification prepared for your data protection officer while submitting stays with you. From the Starter plan you add PDF reports and response recommendations, and from the Pro plan correlation of hosts into one story. It does not remove attackers, restore data or negotiate, and it does not see inside encrypted sessions or on segments you do not monitor. Your responder, endpoint tools and backups cover that ground.

← All 60 questions on Incident responseAll topics