messaging_whatsapp

Explanation

The messaging_whatsapp NDM detects the presence of messaging applications on the network, with a specific focus on WhatsApp. This NDM works by analyzing network traffic to determine the presence of any WhatsApp connections.

What to Look For

Customers should look for any traffic associated with WhatsApp on their networks, especially during times when such traffic is unexpected or out of the ordinary. They should also examine the endpoints on their network for any instances of WhatsApp being installed or used. This information will help security professionals to identify any potential risks associated with the use of WhatsApp on their network and take appropriate action to minimize those risks.