Santos:CCNA Sec 210-260 OCG

Methods Available for Malware Identification

While by no means an exhaustive list, the following tools and technologies provide network administrators with the ability to identify the existence of malware on the network:

Packet captures: Collecting, storing, and analyzing the raw packets that are traversing the network is certainly one way of inspecting traffic for the presence of malware. Although packet captures provide the most granular look into the traffic that is on the network, one primary hurdle in the use of packet capture for malware ...