Posts by Darragh Delaney:

Employees Leaving? Need an Audit Trail?

Users Leaving? How to get an audit trail Network users come and go. When new employees start we create sign on accounts and assign any relevant permissions. When employees leave...

3 Oct 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Detecting Inbound RDP Activity From External Clients

What is RDP? (Remote Desktop Protocol) RDP is a proprietary protocol developed by Microsoft. It provides a user with a graphical interface to connect to another computer over a network...

19 Sep 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Deriving Hostname Annotation From Network Traffic

What is Hostname Annotation? In computer networking hostname annotation is typically referred to the way a text based name is assigned to an IP address. This makes it easier for...

7 Sep 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Detect Hosts Targeting Apache Struts Vulnerability CVE-2018-11776

What is Apache Struts and vulnerability CVE-2018-11776 Apache Struts is a free and open-source framework used to build Java web applications. On Wednesday, August 22, 2018, the Apache Foundation released...

30 Aug 2018

by Darragh Delaney

Network Security Monitoring,NetFort Blog

Looking to Download VAST to Root Out SMBv1? Try This Alternative

What is SMBv1? SMB operates as an application-layer network protocol mainly used for providing shared access to files, printers, and serial ports and miscellaneous communications between nodes on a network....

17 Aug 2018

by Darragh Delaney

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

MSP Managing Your Network? Make Sure You Have Independent Visibility

Using MSP services? Make sure you have independent monitoring in place A third party such as a managed services provider (MSP) is most often an information technology (IT) services provider...

16 Aug 2018

by Darragh Delaney

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Detecting Emotet Trojan Malware

It’s also possible to create a report specifically for Emotet threats, to be displayed on your dashboards. To do this, run an All Events :: Events by Signature name report…

9 Aug 2018

by Darragh Delaney

Network Security Monitoring,NetFort Blog

MAC Address Tracker: Generating a Network Inventory Database Using Network Traffic Analysis

Why do we need to track MAC addresses? A media access control address (MAC address) of a device is a unique identifier assigned to a network interface controller (NIC) for...

20 Jul 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Top 20 LANGuardian Reports

Most popular LANGuardian reports with links to our demo Here we have compiled a list of the top 20 LANGuardian based on customer feedback. They are a mix of operational...

19 Jun 2018

by Darragh Delaney

NetFort Blog

How to detect SMBv1 scanning and SMBv1 established connections

Detect SMBv1 scanning and active or established connections Detecting SMBv1 activity is a subject we have covered previously. It has been used as an attack vector for Ransomware and Cryptocurrency...

14 Jun 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Report on Traffic Between a Certain Source IP and Destination IP Address

Reporting on traffic between network devices Recently one of our customers got in contact with this simple query. "I am looking to find out if it's possible to get traffic...

12 Jun 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

How to Detect Cryptocurrency Mining Activity on Your Network

What is Cryptocurrency Mining? Bitcoin or Cryptocurrency mining is the process by which Cryptocurrency transactions are verified and added to the public ledger, known as the block chain, and also...

3 May 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

How to detect devices on your network running telnet services

Telnet. One of the oldest network protocols Telnet is a protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual...

24 Apr 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Meet us at RSA Conference 2018 – San Francisco

We are heading to the RSA Conference next week, as we do every year! This year, we expect there will be a lot of noise around compliance such as GDPR...

18 Apr 2018

by Darragh Delaney

NetFort News

NetFort Customer Webinar Featuring Newly Released LANGuardian Version 14.4.1

NetFort Customer Webinar Featuring Newly Released LANGuardian Version 14.4.1 Date: Thursday, April 12, 2018 Time: 4:00 PM BST Presenter: Aisling Brennan Register For Webinar Join us as we highlight the...

9 Apr 2018

by Darragh Delaney

NetFort News

Announcing NetFort LANGuardian 14.4.1

LANGuardian 14.4.1 NetFort are delighted to announce the availability of the latest major LANGuardian release, V14.4.1. This release introduces some changes and new features to help with compliance monitoring, including...

27 Mar 2018

by Darragh Delaney

NetFort News,NetFort Blog

Generating an Audit Trail of Failed Access Attempts to Files or Folders

Why is it important to monitor for failed access attempts? For some time now we have included a file activity monitoring feature in our LANGuardian product. It passively generates an...

27 Mar 2018

by Darragh Delaney

GDPR,NetFort Blog

How to detect new server ports in use on your network

What is a server? In client-server processes that use Transmission Control Protocol/Internet Protocol (TCP/IP) or User Datagram Protocol (UDP), the client initiates communication with a server through one of the...

21 Mar 2018

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

NetFort attending Networkshop 2018

Both Noeleen Hussey, Sales Director and Aisling Brennan, Customer Technical Support Manager will be attending Networkshop46 at the Liverpool Guild of Students this month, on Tuesday 27th March in Liverpool....

14 Mar 2018

by Darragh Delaney

NetFort News

How to check for HTTP servers on your network

HTTP Background Designed in the early 1990s, HTTP is an application layer protocol that is sent over TCP, though any reliable transport protocol could theoretically be used. Typically it uses...

21 Feb 2018

by Darragh Delaney

Internet Traffic Monitoring,NetFort Blog

Crypto Mining Malware Spreading Via SMBv1 Vulnerability

Ransomware Cryptocurrency Link During 2017 we saw advances in security tools which have meant IT and network security managers have become better equipped to deal with ransomware threats. In addition,...

8 Feb 2018

by Darragh Delaney

Ransomware Detection,Network Security Monitoring,NetFort Blog

How To Detect Unauthorised DNS Servers On Your Network

Why worry about unauthorised DNS servers? DNS remains a vital part of computer networking. The foundation of DNS was laid in 1983 by Paul ­Mockapetris, then at the University of...

24 Jan 2018

by Darragh Delaney

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Announcing NetFort LANGuardian 14.4

LANGuardian 14.4 NetFort are delighted to announce the availability of the latest major LANGuardian release, V14.4. It includes a number of major enhancements including GeoIP traffic reporting, improvements to the...

11 Jan 2018

by Darragh Delaney

NetFort News,NetFort Blog

Tracking Down New Devices After The Holiday Season

New Devices = New Year Challenges As 2017 draws to a close I would like to take this opportunity to wish all my business and Infosec contacts a Happy Christmas...

19 Dec 2017

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

How to Passively Detect VPN Clients on Your Network

Why worry about VPN clients? VPNs have been around for a long time. A VPN extends a private network across a public network, and enables users to send and receive...

5 Dec 2017

by Darragh Delaney

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

How to Detect Scarab Ransomware by Monitoring Network Traffic

Along comes another one. Scarab Ransomware Scarab Ransomware is just another in a series of Ransomware variants that appeared in 2017. It falls into the crypto Ransomware category which typically...

27 Nov 2017

by Darragh Delaney

Ransomware Detection,NetFort Blog

Firewall Reporting Excessive SYN Packets? Check Rate of Connections

What are SYN packets? Last week I was on the road in Scotland visiting some of our university customers. During a meeting with a Network Security Specialist, a network issue...

27 Nov 2017

by Darragh Delaney

Network Security Monitoring,NetFort Blog

Do you really need ‘Artificial Intelligence’ for actionable alerts

Using Traffic Analysis as a Data Source As we have mentioned numerous times in our blogs, Network Traffic Analysis or (DPI) Deep Packet Inspection is a very flexible technology. It...

27 Nov 2017

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

Did Any Zombie Creep Into Your Network During Halloween?

Network Zombies Now that Halloween is behind us we can put away the scary decorations and funny costumes. It may also be a good time to check our networks for...

1 Nov 2017

by Darragh Delaney

Network Traffic Monitoring,NetFort Blog

How to Detect Badrabbit Ransomware on Your Network

What is Badrabbit Ransomware? A new strain of ransomware nicknamed "Bad Rabbit" has been found spreading in Russia, Ukraine and Germany. The outbreak bears similarities to the WannaCry and Petya...

25 Oct 2017

by Darragh Delaney

Ransomware Detection,NetFort Blog