Threat Intelligence
Stop Lateral Movement.
Ransomware does not detonate immediately. It maps, moves, and escalates. You must sever the pathways it relies on.
Severing the Attack Chain
Ransomware relies on protocols like SMB, RDP, and WMI to spread horizontally across an environment. Introsnet explicitly blocks these protocols between unapproved endpoints at the kernel level.
By replacing implicit trust with Zero Trust boundaries, the blast radius of a phishing attack is contained to a single workstation.
Decoy Workloads & Telemetry
By deploying internal honey-tokens (decoy servers and credentials), any attempt at lateral movement triggers immediate, high-fidelity alerts that cannot be bypassed by network obfuscation.
This telemetry feeds directly into the intronet control plane to automatically quarantine compromised nodes.
Common Lateral Movement Vectors
| Protocol / Technique | Risk Level | Introsnet Mitigation |
|---|---|---|
| SMB (Port 445) | CRITICAL | Kernel block except for approved file servers. |
| RDP (Port 3389) | CRITICAL | Restricted to jump boxes via mTLS. |
| Pass-the-Hash | HIGH | Identity-based access invalidates stolen NTLM hashes. |