Featured Posts

An alert touches multiple segments of the network, representing the challenge to reduce false positives
Deep Network Observability

How to Reduce False Positives with Shared Context

False positives are rarely caused by too many alerts, but by missing context. Let’s say a spike in outbound traffic shows up in the firewall logs. Around the same time, ...

Read More
Magnifying glass on top of a diagram that looks like both a fingerprint and a network, representing end-to-end network troubleshooting
Network Operations

Why Most Performance Investigations Start in the Wrong Place

A padlock silhouetted against a dark background, surrounded by a spray of white particles, representing password spraying detection.
Security Operations

What Password Spraying Looks Like in Raw Network Telemetry

All Posts

jim
Network Operations

What is network traffic intelligence?

With the onslaught of malware and cloud applications increasing, network traffic intelligence has become increasingly important. When an infection

Read More
jimd
Security Operations

Packets vs. flow/IPFIX: The effort to reduce dwell time

When we hear about a cyberattack these days, there’s often a reference to when the network was originally compromised.

Read More
jim
Security Operations

Network traffic demands of the post-pandemic era and how to manage them

Gartner just posted their worldwide spending forecast report for the first quarter of 2021 and it looks positive. Clearly,

Read More
jim
Network Operations

How to get the best ROI for your SIEM: Tips on picking the right NDR

Has management made enhancing your network monitoring toolset with an NDR component a priority for the new year? Have

Read More
jimd
Network Operations

Returning to normal: monitoring the reintroduction of the workforce

When this pandemic started and nearly the entire workforce went remote, our focus was to maintain the quality of

Read More
jimd
General

VPN users complaining of poor application experience? Here’s how to troubleshoot it

We’re all feeling it. As a confident NetOps leader, you’ve made sure your business continuity plan had allowances for

Read More
jimd
Security Operations

SharePoint vulnerabilities: using metadata to verify traffic

Last month the FBI posted ALERT AC-000113-TT, which mentions an increase in unidentified cyber actors exploiting a known SharePoint

Read More