Expose the Invisible: Detecting Lateral Movement Within Encrypted Traffic — ExtraHop

What you'll learn

• The Perimeter is Dead: Ubiquitous credential theft has reduced the effectiveness of traditional perimeter security tools. - The Encryption Blackout: Widespread encryption across all critical protocols (HTTPS, TLS, LDAP, DNS, NTLM, SMBv3, MS-RPC, WSMAN) creates a 'black box' for every connection, making it nearly impossible to spot stealthy lateral movement. - Decrypt, Decode, and Defend: Only tools that harness network traffic, like NDR, can decrypt and decode this traffic without adding latency or risk. This grants you unprecedented visibility inside the black box to identify malicious behavior and stop lateral threats in their tracks.

Topics covered