Posts by Darragh Delaney:

DNSpionage. A DNS Server Hijacking Attack

Monitoring DNS requests so as to detect DNSpionage attacks

What is DNSpionage? Late last year, Cisco Talos discovered a DNS hijacking attack targeting Lebanon and the United Arab Emirates (UAE) affecting .gov domains, as well as a private Lebanese...

21 Feb 2019

Internet Traffic Monitoring,NetFort Blog

Network Security Monitoring Tools Need Traffic For Context

What are network security monitoring tools? Network Security Monitoring is the collection, analysis, and escalation of indications and warnings to detect and respond to intrusions on computer networks. Network security...

11 Feb 2019

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

How to Alert on Rogue DHCP Servers

Detecting rogue DHCP servers using network traffic

Alert on Rogue DHCP Servers Using Network Traffic as a Data Source Recently a customer came to us with the following query: "We were wondering whether there is a way...

7 Feb 2019

Announcing NetFort LANGuardian 14.5. A look at the new features

LANGuardian 14.5 NetFort is delighted to announce the availability of our latest LANGuardian release, V14.5. “One of our objectives is to ensure that our customers always have ‘eyes on their...

18 Jan 2019

How to Detect RYUK Ransomware on Your Network

What is RYUK Ransomware? An advisory from the US based Department of Health and Human Services notes that attacks involving RYUK appear to be targeted. In fact, its encryption scheme is...

19 Dec 2018

Ransomware Detection,NetFort Blog

Passive capture of usernames from RADIUS traffic

What is RADIUS? RADIUS stands for Remote Authentication Dial In User Service. A RADIUS server can support a variety of methods to authenticate a user. When it is provided with...

18 Dec 2018

Beware of Exposed Ports at Your Networks Edge

More reasons to check inbound traffic on your network Looking though the latest infosec news this week I spotted two exploits which use similar attack methods. Printers targeted via TCP...

4 Dec 2018

Internet Traffic Monitoring,Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Extracting Metadata From PCAP Files

What our customers want to extract from PCAP files In my previous blog post on the topic of PCAP file management, I looked at how you can import and export...

3 Dec 2018

PCAP File Analysis and Extraction Using LANGuardian

Working With PCAP Files PCAP or packet capture files can be extracted from the network by using applications such as Wireshark or exporting them from network devices such as firewalls....

23 Nov 2018

NetFort Blog

What Traffic Reports To Focus on if You Are Dealing With Google Unusual Traffic Notifications

Why does Google sometimes show unusual traffic messages? Recently I worked with a number of network managers who downloaded our LANGuardian software to try and find the source of malware...

16 Nov 2018

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

5 Tips For Monitoring Network Traffic on Your Network

Monitoring traffic on your network is important if you want to keep it secure and running efficiently. The information obtained by network traffic monitoring tools can be used in multiple...

15 Nov 2018

Internet Traffic Monitoring,Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Video – Tracking Mobiles Devices on Your Network

Tracking Mobile Devices on Your Network In this video we look at how you can monitor mobile devices on your network using LANGuardian. LANGuardian is deep-packet inspection software that monitors...

15 Nov 2018

We Are Hiring – Senior Software Engineers

DESCRIPTION At NetFort, we design and develop software that analyzes network traffic using deep packet inspection techniques to give our customers a unique level of internal visibility, including user activity,...

26 Oct 2018

Employees Leaving? Need an Audit Trail?

Getting an audit trail when employees leave

Users Leaving? How to get an audit trail Network users come and go. When new employees start we create sign on accounts and assign any relevant permissions. When employees leave...

3 Oct 2018

Detecting Inbound RDP Activity From External Clients

What is RDP? (Remote Desktop Protocol) RDP is a proprietary protocol developed by Microsoft. It provides a user with a graphical interface to connect to another computer over a network...

19 Sep 2018

Deriving Hostname Annotation From Network Traffic

Derive Hostname Annotation from network traffic

What is Hostname Annotation? In computer networking hostname annotation is typically referred to the way a text based name is assigned to an IP address. This makes it easier for...

7 Sep 2018

Detect Hosts Targeting Apache Struts Vulnerability CVE-2018-11776

What is Apache Struts and vulnerability CVE-2018-11776 Apache Struts is a free and open-source framework used to build Java web applications. On Wednesday, August 22, 2018, the Apache Foundation released...

30 Aug 2018

Network Security Monitoring,NetFort Blog

Looking to Download VAST to Root Out SMBv1? Try This Alternative

What is SMBv1? SMB operates as an application-layer network protocol mainly used for providing shared access to files, printers, and serial ports and miscellaneous communications between nodes on a network....

17 Aug 2018

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

MSP Managing Your Network? Make Sure You Have Independent Visibility

Using MSP services? Make sure you have independent monitoring in place A third party such as a managed services provider (MSP) is most often an information technology (IT) services provider...

16 Aug 2018

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Detecting Emotet Trojan Malware

It’s also possible to create a report specifically for Emotet threats, to be displayed on your dashboards. To do this, run an All Events :: Events by Signature name report…

9 Aug 2018

Network Security Monitoring,NetFort Blog

MAC Address Tracker: Generating a Network Inventory Database Using Network Traffic Analysis

Why do we need to track MAC addresses? A media access control address (MAC address) of a device is a unique identifier assigned to a network interface controller (NIC) for...

20 Jul 2018

Top 20 LANGuardian Reports

Most popular LANGuardian reports with links to our demo Here we have compiled a list of the top 20 LANGuardian based on customer feedback. They are a mix of operational...

19 Jun 2018

NetFort Blog

How to detect SMBv1 scanning and SMBv1 established connections

Detect SMBv1 Scanning and SMNv1 active or established connections

Detect SMBv1 scanning and active or established connections Detecting SMBv1 activity is a subject we have covered previously. It has been used as an attack vector for Ransomware and Cryptocurrency...

14 Jun 2018

Report on Traffic Between a Certain Source IP and Destination IP Address

Get traffic between a certain source IP and dest IP along with the time of the connections

Reporting on traffic between network devices Recently one of our customers got in contact with this simple query. "I am looking to find out if it's possible to get traffic...

12 Jun 2018

How to Detect Cryptocurrency Mining Activity on Your Network

Detect cryptocurrency mining on your network using network traffic analysis

What is Cryptocurrency Mining? Bitcoin or Cryptocurrency mining is the process by which Cryptocurrency transactions are verified and added to the public ledger, known as the block chain, and also...

3 May 2018

How to detect devices on your network running telnet services

Telnet. One of the oldest network protocols Telnet is a protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual...

24 Apr 2018

Meet us at RSA Conference 2018 – San Francisco

We are heading to the RSA Conference next week, as we do every year! This year, we expect there will be a lot of noise around compliance such as GDPR...

18 Apr 2018

NetFort Customer Webinar Featuring Newly Released LANGuardian Version 14.4.1

NetFort Customer Webinar Featuring Newly Released LANGuardian Version 14.4.1 Date: Thursday, April 12, 2018 Time: 4:00 PM BST Presenter: Aisling Brennan Register For Webinar Join us as we highlight the...

9 Apr 2018

Announcing NetFort LANGuardian 14.4.1

LANGuardian 14.4.1 NetFort are delighted to announce the availability of the latest major LANGuardian release, V14.4.1. This release introduces some changes and new features to help with compliance monitoring, including...

27 Mar 2018