video
Detect Ransomware with Network Detection and Response (NDR) - The Attack Kill Chain Explained
January 14, 2026
Jamie Moles, Sr. Manager of Technical Marketing at ExtraHop, breaks down the full ransomware kill chain, revealing the critical moments where network detection and response (NDR) can stop them before data is stolen or encrypted.
You'll learn:
• Why attackers bypass endpoint security and hide in encrypted traffic.
• How a ransomware attack really starts (beachhead, C2, discovery, lateral movement).
• Why lateral movement is the BEST opportunity to catch attackers.
• How ExtraHop RevealX decrypts Microsoft RPC to expose hidden threats
The network never lies. If you can see the traffic, you can stop the attack.




