Extrahop Networks, Inc.

Michael Ryan Corder

Jesse Abraham Rothstein

Xue Jun Wu

Michael Kerber Krause Montague

Benjamin Thomas Higgins

Jeff James Costlow

Edmund Hope Driggs

Jonathan Jacob Scott

Marc Adam Winners

Kenneth Perrault

Embodiments are directed to monitoring network traffic using network monitoring computers (NMCs). Metrics may be determined based on monitoring network traffic associated with a plurality of entities each associated with a profile that includes the metrics for each entity. Beaconing metrics associated with beaconing activity may be determined based on the metrics. The profile of each entity may be compared with the beaconing metrics to determine the entities that may be engaged in beaconing activity. The entities may be characterized based on beaconing activity such that the beaconing activity includes communication with endpoints associated with the third parties, employing communication protocols associated with the third-parties, or exchanging payloads consistent with the beaconing activity. Reports that include information associated with the entities and its beaconing activity may be generated.

Identifying network entities based on beaconing activity

Growing community of inventors

Seattle, WA, United States of America

Michael Ryan Corder