TestimoX

API Reference

Class

NetworkSniffingDetector

Namespace ADPlayground.Audit
Assembly ADPlayground

Detects possible network sniffing activity using System event log events.

Inheritance

  • Object
  • NetworkSniffingDetector

Constructors

public NetworkSniffingDetector(Func<String, IEnumerable<NetworkSniffingEvent>> getEvents = null) #

Initializes a new instance of the NetworkSniffingDetector class.

Parameters

getEvents System.Func{System.String,System.Collections.Generic.IEnumerable{ADPlayground.Audit.NetworkSniffingEvent}} = null optionalposition: 0
Delegate returning System log events.

Methods

public IEnumerable<NetworkSniffingEvent> GetSuspiciousEvents(String computerName = null) #
Returns: IEnumerable<NetworkSniffingEvent>

Enumerates suspicious events from the target computer.

Parameters

computerName System.String = null optionalposition: 0
Target computer or null for local.