Featured Posts

Multiple data streams flow independently, but together form one fabric, representing packet replication
Network Operations

When One Packet Stream Needs to Feed Five Tools

In most environments today, one packet stream rarely serves a single purpose. Let’s say a SPAN or ERSPAN session mirrors traffic from a core switch. That same stream may ...

Read More
Radar scans a digital network, representing flow-based threat hunting
Security Operations

How Flow Data Supports Threat Hunting Without Drowning Analysts

A magnifying glass uncovers an alert midway along a progress bar, representing network baselining and troubleshooting
Deep Network Observability

Proving Nothing Changed: The Most Overlooked Troubleshooting Skill

All Posts

Data path being pulled off screen, representing data exfiltration
Network Security

Data Exfiltration Explained: Techniques, Risks, and Defenses

Unlike accidental data leaks caused by human error or misconfigured systems, data exfiltration is a deliberate and malicious act.

Read More
Security Operations

Detecting Data Exfiltration with NetFlow and Packet Capture

When it comes to understanding data exfiltration, you need to be able to see the whole picture. But most

Read More
Security Operations

Dark DDoS: Masked Data Exfiltration

I was attending the 12th annual NC InfoSeCon conference back in October and in one of the presentations, the

Read More
Security Operations

What is DNS Tunneling?

DNS tunneling, is the ability to encode the data of other programs or protocols in DNS queries and responses.

Read More