I’m new here so if I need to take this to a different forum please let me know.
We had a pen tester here on site and they called me and asked if I was seeing or had seen the ARP Poisoning attack they did. I said no, and then opened a case with EH to see if there was a detection for this. They said there wasn’t one.
Is this something EH can do? do I have to build a custom detection or is there a better way to detect this type of attack?
1 Like