Using Data Fence to detect sniffers

While Data Fence was designed to detect suspicious access to regular files like Microsoft Word documents, it can also be used to detect access to directories and special files. In this video I show how Data Fence can watch programs opening the Berkeley Packet Filter devices, a common technique attackers will use to sniff packets on your network.

Previous
Previous

Data Fence: Getting Started

Next
Next

Data Fence, First Introduction