Often, the first indication that something may be amiss within your company network will be relatively minor. On the surface, your critical process may be running as normal, your CPUs may be operating at expected utilisation levels and nothing gives cause for concern. A closer look at network traffic, however, may reveal anomalous behaviour.
These anomalies may not seem malicious at first, but any network traffic that differs significantly from that which is generally expected is often a sign of malicious intent. But how do businesses identify this unusual network behaviour?
