PT NAD Detects Malicious Insider at Novomet-Perm
Novomet-Perm has deployed Positive Technologies’ PT NAD to analyze network traffic and detect threats.
During a pilot deployment, the system detected an insider threat actor, after which the solution was put into continuous use.
PT Network Attack Discovery analyzes corporate network traffic. Security specialists review alerts, investigate incidents, and create custom detection rules for scenarios they want to monitor. The system helps detect attacker reconnaissance and lateral movement within the network, while built-in detection rules and indicators of compromise speed up analysis. The deployment was carried out by Positive Technologies partner Abrikos Group.
He noted that an individual alert in network traffic does not always give an information security specialist enough context to understand what is happening on the network. That is why effective traffic analysis requires not only threat detection mechanisms but also context that helps specialists investigate an incident and reconstruct what happened.
