Why do companies so often learn about a breach from outsiders?

Because nobody inside was looking in the right place. A customer receives a fake invoice from your hacked mailbox, a bank reports odd transfers, the police or a national CERT find your data on a criminal server, or the attackers announce it on their leak site. Inside the company, the signs were often there but unread: firewall logs nobody reviews, an antivirus alert closed as noise, a server uploading at night. Mandiant's M-Trends reports have repeatedly found that intrusions discovered by an outside party had been running longer than those a company found itself. Hearing it from outsiders also costs you control over the timeline and the message. Reading what already crosses your network changes that; NetSenX turns it into explained alerts for beaconing, scanning, lateral movement and unusual uploads, on every plan, Free included.

Read next

← All 35 questions on Have I been hacked?All topics