TEHTRIS NTA is a tactical solution for analyzing your network flows in real time, using flow capture metadata and passive audit mechanisms. Depending on its position in your infrastructure, TEHTRIS NTA can monitor both north/south and east/west flows. Several modules are available in TEHTRIS NTA, including signature-based detection and behavioral-based techniques. TEHTRIS NTA continuously learns and examines all flows to perform advanced analysis and detect network anomalies
By recording metadata in NetFlow mode, TEHTRIS NTA offers the ability to go back in time, finding out who spoke to whom, when and how. Unlike many solutions, TEHTRIS NTA does not require a SIEM to be useful, since the tool is directly integrated into the TEHTRIS XDR Platform. In addition, TEHTRIS NTA is not limited to signature or user behavior analysis to raise alerts. Indeed, some suspicious elements, like lateral movements or slow stealth scans, may be detected in other ways, such as lateral movements, or slow stealth scans.