Detection of Wireless Compromise

Monitor login sessions for new or unexpected devices or sessions on wireless networks.
Monitor application logs for new or unexpected devices or sessions on wireless networks.
New or irregular network traffic flows may indicate potentially unwanted devices or sessions on wireless networks. In Wi-Fi networks monitor for changes such as rogue access points or low signal strength, indicating a device is further away from the access point then expected and changes in the physical layer signal.^{[1] [2]} Network traffic content will provide important context, such as hardware (e.g., MAC) addresses, user accounts, and types of messages sent.