Network Communication captures outbound or inbound communication initiated by an application or mobile device, including the domains contacted, protocols used, and session metadata associated with the communication.
Monitoring network communication enables defenders to identify command-and-control traffic, data exfiltration, or suspicious communication patterns originating from mobile applications.
Examples
Collection Methods
| Name | Channel |
|---|---|
| android:EnterpriseNetworkLog | DevicePolicyManager.retrieveNetworkLogs(): DnsEvent / ConnectEvent; VPN flow metadata |
| Application Vetting | None |
| iOS:NetworkExtension | NEFilterFlow, per-app VPN, or secure web gateway flow metadata |
| iOS:NetworkExtension | NEFilterFlow / per-app VPN / secure-web-gateway flow metadata |