# What does NetSenX give us during an incident?

Evidence and timing, not extra hands. During an incident NetSenX gives you alerts for beaconing, scanning, lateral movement and unusual outbound data volume, on every plan, each with a plain-language reason, the hosts involved, destinations, volumes and times, and the MITRE ATT&CK technique where one applies; the network map of who talks to whom; an audit log of alerts and analyst decisions; and tracking of the NIS2 Article 23 deadlines, with a GDPR Article 33 notification prepared for your data protection officer while submitting stays with you. From the Starter plan you add PDF reports and response recommendations, and from the Pro plan correlation of hosts into one story. It does not remove attackers, restore data or negotiate, and it does not see inside encrypted sessions or on segments you do not monitor. Your responder, endpoint tools and backups cover that ground.

FAQ: [Incident response](https://netsenx.com/en/faq/incident) · https://netsenx.com/en/faq/what-does-netsenx-give-us-during-an-incident

## Read next

- https://netsenx.com/en/detect-ransomware-on-the-network
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [A supplier with access to our systems has been hacked. What do we do?](https://netsenx.com/en/faq/a-supplier-with-access-to-our-systems-was-hacked)
- [Is it a compromised account or a compromised device, and why does it matter?](https://netsenx.com/en/faq/compromised-account-or-compromised-device)
- [What are the early warning signs of ransomware on a network?](https://netsenx.com/en/faq/what-are-the-early-warning-signs-of-ransomware-on-a-network)
- [Can network monitoring detect ransomware before encryption?](https://netsenx.com/en/faq/can-network-monitoring-detect-ransomware-before-encryption)
- [Does NetSenX stop ransomware?](https://netsenx.com/en/faq/does-netsenx-stop-ransomware)