Overview
Before a targeted attack begins, there is typically a phase where an attacker gathers information about possible vulnerabilities on the network and specific systems. This can range from passive scans to active reconnaissance. To prevent targeted attacks before they occur, you need to identify and monitor potential passive or active reconnaissance threat attempts, helping to prevent targeted attacks before they occur. The Reconnaissance Content Pack provides an easy-to-read breakdown of known reconnaissance events on your network, a logical workflow for reviewing reconnaissance signatures and interactions, and rapid insight into network scans that have not been performed by in-house IT.
Download Content Pack
Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.