How a Higher-Ed Institution Validates Security Incidents in Minutes with ExtraHop

ExtraHop is a network detecion and response response tool for enterprise security. ExtraHop can correlate server and client activity and offer insights into HTTP server data. It’s crucial to take any alert seriously, and that’s why it’s crucial for security teams to take an alert seriously. The ExtraHop Reveal(x) detection card showed the list of servers being queried, but we did not see details about the user accounts. We drilled down into the device involved and viewed LDAP client activity to see the BindDN list.”]

Source: https://www.csoonline.com/article/3625674/how-a-higher-ed-institution-validates-security-incidents-in-minutes-with-extrahop.html