DASHBOARD OVERVIEW
The Status Page provides an at-a-glance overview of the fleet's security posture. The dashboard highlights malware activity, blocked websites, vessel connectivity, DNS request volume and blocked traffic categories.
To open the Protect page on the Dualog Portal:
- Click on the hamburger-icon in the upper left corner
- This will open the Main menu
- Click on Protect
C2 DNS Requests
Displays computers attempting to communicate with known Command & Control (C2) domains. Each detection includes the affected vessel, client information and timestamps. These alerts often indicate malware such as ransomware or botnets.
Blocked Site attempts
Shows attempts to access domains classified as malicious. Counts update immediately whenever another access attempt occurs, making it easy to spot recurring activity.
Ship Status and DNS Activity
The dashboard also reports which vessels are online and graphs the DNS request volume processed by Dualog Protect. Mature installations may process millions of DNS requests per day.
Investigating Events
Selecting any dashboard card opens a detailed view where operators can inspect the underlying events, including vessel name, blocked domain, IP address, timestamps and (when available) the client's MAC address.
Real-Time Malware detection
When a client contacts a known C2 domain, the dashboard updates within seconds. This enables operators to identify infected systems while they are actively communicating and quickly contact the vessel for remediation.
Typical Response Workflow
- Monitor the dashboard for new alerts.
- Open the relevant dashboard card.
- Identify the affected vessel and client.
- Contact the vessel with the client details.
- Scan or isolate the affected device.
- Continue monitoring until no further malicious traffic is observed.
Key benefits
- Real-time visibility of malware activity.
- Fleet-wide overview from a single dashboard.
- Immediate identification of affected vessels and clients.
- Fast response to Command & Control communications.
- Simple deployment and operation.
Comments
Article is closed for comments.