messaging_rocket-chat

Explanation

The messaging_rocket-chat NDM monitors the network for the presence of the messaging application Rocket Chat. Rocket Chat is an open source messaging platform that allows for encrypted and secure communication among team members.

What to Look For

If the messaging_rocket-chat NDM is triggered, it means that there may be unauthorized or potentially malicious use of the Rocket Chat application on the network. To examine the results of this event, check network traffic logs and examine endpoint devices for the presence of the Rocket Chat application. Reviewing user activity within Rocket Chat can also provide insight into potentially malicious behavior. Remediation may involve blocking access to the application or restricting user access permissions.