The external threat is one of the most high-profile risks that organisations face. Representing more than 80 percent of attacks today, external attackers look to take advantage of network and user weakness via malware, phishing, and advanced persistent threats (APT) .

Key indicators of a compromise can be found by analysing the network traffic from outbound connections-specifically, traffic coming from an endpoint on your internal network and connecting through your firewall to something on the internet. Focusing on this threat traffic will give your organisation visibility into early indicators of potential threat.

Read along to learn more about the top eight indicators of compromise in network threat traffic and how by putting a network monitoring solution in place and analysing your network’s traffic, you can quickly determine whether compromised systems exist on your network, and if so, where.