/nsa/ - Can network monitoring software be enough
Enrive[ a / b / biz / c / co / g / gg / global / k / lit / Movies / mu / nsa / pc / pol / sci / toon / tv / x / ]

Tutelary Technology - /nsa/ [Catalog] [Board FAQ]

This thread has been flagged as old and contains pop-up ads.
Replying will revoke its old status.



CAPTCHA Image

TopBottom

Media deleted

Can network monitoring software be enough to know if you are being spied upon by your OS/Installed programs, or not?


>>

>>2850 technically yes. If you shut down all programs and monitor your subsystems for network traffic, you can sometimes pin an unwanted connection, but it is very hard and requires a thorough understanding of all your subsystems. Keyloggers will most likely be hooked into trusted installations or will be separate but named incognito, like "system.subnetmask.trustedupdateservice" etc

>>

Ideally you want to monitor from a gateway, not from the potentially compromised system itself.