messaging_discord

Explanation

The messaging_discord NDM is designed to detect the use of the Discord messaging application on the network. When triggered, it alerts network administrators to the presence of this application and allows for further investigation into its use.

What to Look For

To examine the results of the messaging_discord event, you should first check the network logs for any instances of the application being accessed or used. You should also inspect the endpoints of any users suspected of using Discord, and look for signs such as the installation of the application on their device or any suspicious network activity. By analyzing this data, you can gain a better understanding of the scope and severity of the security event and take appropriate action to mitigate any potential risks to your network.