The process of comparing predetermined profiles of generally accepted definitions of benign protocol activity for each protocol state against observed events to identify deviations.
Related Resources
Solution
Network Detection and Response
NETSCOUT's network detection and response solution enables teams to investigate activity before, during, and after an event with a focus on network visibility and investigation.
NETSCOUT’s network security experts provide world-class cyber security research and threat analysis for the benefit of today’s enterprise and network operators.