What is an extrusion scan
During an extrusion scan all in and out going network traffic is monitored for a certain time. Such a monitoring scan is performed in two parts first a short scan of two or three days to get in impression
of the size and sort of traffic. Based on this input a longer monitoring time, dependent on the type, size and demands of the organisation, is performed. It is also possible to instigate a full packet scan for
certains types of systems and/or traffic. All the gathered data is (off line) analysed for traces of malicious activity. Dependent on the findings mitigating actions are adviced.
Example diagram extrusino scan