ExtraHop named a Leader in the 2025 Forrester Wave™: Network Analysis And Visibility Solutions

Search
  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right

DETECTION OVERVIEW

SMBv1 Connection

Risk Factors

SMBv1 is a deprecated dialect of the SMB/CIFS file sharing protocol. SMBv1 vulnerabilities have been exploited by well-known ransomware such as WannaCry and Petya to install malware on vulnerable devices.

Category

Hardening
Next in Hardening: Self-signed TLS Server Certificate

Attack Background

Mitigation Options

Disable SMBv1

Associated content

2025 Security Predictions: Top Ransomware Groups to Watch in a Post-LockBit Threat Landscape — ExtraHop

ExtraHop spoke to three leading cyber intelligence experts to refine its forecast for RaaS royalty in 2025.

Blog

ExtraHop® Report Finds Ransomware Payouts Hit Record Highs as Attackers Adapt — ExtraHop

The 2025 ExtraHop Global Threat Landscape Report examines the expanding attack surface and evolving tactics being used by threat actors

News

Ransomware: Prepare For an Imminent Escalation — ExtraHop

If you think ransomware is bad now, cybersecurity experts warn it’s only going to get worse as 2024 wears on and the US general election approaches. Tile description:

Blog

Announcing The Forrester Wave™: Network Analysis And Visibility Solutions, Q4 2025

Network analysis and visibility solutions remain underrepresented in enterprises. Find out why in this preview of a new Wave report.

Report

ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response — ExtraHop

ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response

News

Detections

Visit this resource for more information.

Docs

The 2025 ExtraHop Global Threat Landscape Report: The Alarming Reality of Threat Actor Dwell Time and Deeper Network Access — ExtraHop

This analysis exposes the critical link between an organization's lack of internal visibility and the escalating cost of compromise, demanding an urgent re-evaluation of how core business assets are protected.

Blog

ExtraHop RevealX MITRE ATT&CK Coverage 2024 — ExtraHop

Learn why you need to be wary of the claims certain network detection and response providers make about their coverage against the MITRE ATT&CK framework.

Blog

MITRE ATT&CK - Network Detection & Response with RevealX — ExtraHop

Learn how NDR from RevealX helps security teams detect and investigate more adversary TTPs in the MITRE ATT&CK framework than rule-based tools.

External
Periodic Table of Use Cases

What else can RevealX do for you?