Network Analytics

Monitor Network Traffic to Discover and
Eliminate Threats

Request a Demo

The Challenge

Advanced attackers target the weak spots. Following initial an initial endpoint compromise, the next steps are to expand, gain privileges and access to other resources in your environment to ultimately get to your sensitive data and exfiltrate it to their premises. Prominent part to these attack vectors can be traced only by generated anomalous network traffic.

The Solution

Cynet Network Analytics continuously monitors network traffic to detect and block otherwise invisible malicious activity.

Network Monitoring: Move from Detection to Active Prevention

Unlike common network analytics tools that provide only threat detection, Cynet enables security teams to choose between detection mode and proactive prevention.

Raise alert upon detection of malicious activity to be resolved manually using Cynet automated context generation and remediation actions.

Enable Cynet built-in preventions or tailor a customized flow utilizing host isolation, traffic block and user disable.

Threat Protection

Cynet Network Analytics protection spans the wide range of advanced attacks stages, utilizing network visibility, behavioral analysis, deterministic modules and threat intelligence.

Reconnaissance

Gathering information on the attacked environments is a prerequisite for efficient malicious expansion and is typically executed by any type of port scanning.

Credential Theft

Gaining user account credentials is a key enabler of lateral movement. To achieve that, attackers exploit networking mechanism weaknesses to extract password hashes from intercepted internal traffic.

Lateral Movement

For advanced attackers, the first compromised endpoint is merely a mean, not an end by itself. The attack’s true objective resides on other endpoints or the server. There are numerous vectors to spread across an environment, many of which generate unique network traffic.

Data Exfiltration

The final stage in any attack is to exfiltrate compromised data from the internal environment to the attacker’s premises. A common way to evade perimeter defenses is to disguise the exfiltration as a legitimate protocol such: DNS, HTTPS, etc.

Risky Connections

Active communication with malicious sites includes: malware distribution, phishing and known C2C based on intelligence feeds.

Watch Cynet in Action

Request a Demo

The Cynet 360 Platform

Cynet Network Analytics is a native part of Cynet 360, the only security platform that protects the entire environment including users, network, files and hosts, by integrating Network Analytics with: