article thumbnail

SHARED INTEL: How NTA/NDR systems get to ‘ground truth’ of cyber attacks, unauthorized traffic

The Last Watchdog

In one case, ExtraHop tracked a made-in-China surveillance cam sending UDP traffic logs , every 30 minutes, to a known malicious IP address with ties to China. One might look at Capital One as an indication of just poor hygiene or issues with how they configured their web application firewalls or their S3 buckets.