Reconnaissance

Reconnaissance detections are an essential component of Vectra Fusion's Vectra Detection Models (NDMs) that are designed to identify and alert network administrators to activities associated with scanning and reconnaissance. These detections help identify potential attackers who are seeking information about the network and its infrastructure. For example, the system can detect Port Scanning and Service Enumeration attempts, which indicate an attacker is trying to identify open ports and the services running on them. The detection of OS Fingerprinting attempts can identify an attacker's attempt to learn more about the target operating system and any associated vulnerabilities. By identifying these reconnaissance activities, the system can alert network administrators to the presence of potential threats and enable them to take the necessary steps to mitigate these threats before they escalate into a full-blown attack.