messaging_meta-messaging

Explanation

This NDM is designed to detect the presence of any "Meta" messaging applications on a network.

What to Look For

To examine the results of the messaging_meta-messaging event, customers should look for patterns of messaging traffic on their networks. This might include traffic from popular messaging apps such as WhatsApp, Facebook Messenger, or Instagram. Customers should also examine endpoint devices for evidence of messaging applications installed or active. If messaging traffic is identified, customers should investigate the source and destination of the traffic to determine if it is legitimate or potentially malicious. Remediation may involve blocking or restricting certain messaging applications, or investigating further to identify potential security threats.