ExtraHop named a Leader in the 2025 Forrester Wave™: Network Analysis And Visibility Solutions

  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right

video

Detect Ransomware with Network Detection and Response (NDR) - The Attack Kill Chain Explained

January 14, 2026

Jamie Moles, Sr. Manager of Technical Marketing at ExtraHop, breaks down the full ransomware kill chain, revealing the critical moments where network detection and response (NDR) can stop them before data is stolen or encrypted.

You'll learn:
• Why attackers bypass endpoint security and hide in encrypted traffic.
• How a ransomware attack really starts (beachhead, C2, discovery, lateral movement).
• Why lateral movement is the BEST opportunity to catch attackers.
• How ExtraHop RevealX decrypts Microsoft RPC to expose hidden threats

The network never lies. If you can see the traffic, you can stop the attack.