messaging_telegram

Explanation

The messaging_telegram event is a security event in the Netography Fusion Portal that evaluates for the presence of Telegram messaging application on the network.

What to Look For

To analyze the results of the messaging_telegram event, look for network traffic associated with the Telegram application, including the server IP addresses and communication patterns. On the endpoint, check for the presence of the Telegram client application, including the installation path and file hashes. The messaging_telegram event is critical for detecting potential security threats resulting from Telegram usage on the network, such as data exfiltration or malware distribution.