securelist.com· Jul 31, 2026· by Arseny Vesnovsky, Valery Akulenko, Dmitry Sabadash

Network Anomaly Detection in KATA

An analysis of how Network Anomaly Detection (NAD) rules work within Kaspersky Anti Targeted Attack, using Kerberoasting and DNS tunneling attacks as examples.

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#DNS#Security technology#Infrastructure#Threat hunting#Kerberos#NDR#Traffic tunneling

Network Anomaly Detection in KATA

More Writeups Like This

NightEagle targets Russian companies

5 bước bảo mật cơ bản cho VPS Linux ngay sau khi nhận máy

Checking CDS and CDNSKEY on every nameserver before a DS update, in stdlib Python

Silent Train: How Volt Typhoon Quietly Hijacked Hundreds of Everyday Devices