Skip to main content

Solutions
Industries
Platform
Resources
Customers
Company

video

Detect Ransomware with Network Detection and Response (NDR) - The Attack Kill Chain Explained

January 14, 2026

Jamie Moles, Sr. Manager of Technical Marketing at ExtraHop, breaks down the full ransomware kill chain, revealing the critical moments where network detection and response (NDR) can stop them before data is stolen or encrypted.

You'll learn:
• Why attackers bypass endpoint security and hide in encrypted traffic.
• How a ransomware attack really starts (beachhead, C2, discovery, lateral movement).
• Why lateral movement is the BEST opportunity to catch attackers.
• How ExtraHop RevealX decrypts Microsoft RPC to expose hidden threats

The network never lies. If you can see the traffic, you can stop the attack.

Associated content

Calculating Your Security Blast Radius - From Potential to Actual Impact

January 21, 2026

Understanding the potential impact of a breach is not enough. This session demonstrates how to move beyond theoretical damage to precisely calculate the actual blast radius of an attack, revealing every compromised asset and its business context.

Watch Video

Mitigate the Blast Radius Detecting Ransomware with NDR

June 23, 2025

There's a powerful source of truth that can be leveraged to stop attackers in their tracks: the network itself

Read article

Are You Ready for Ransomware?

May 1, 2024

As common security tools get smarter, so do ransomware attackers. Preventative tools like EDR are no longer enough. You need total network visibility and advanced machine learning to detect — and stop — these threats.

View & Download