Featured Posts

Radar scans a digital network, representing flow-based threat hunting
Security Operations

How Flow Data Supports Threat Hunting Without Drowning Analysts

Threat hunting should feel deliberate. You should be able to follow a path, validate a suspicion, and document what happened without jumping across five consoles. Yet in many ...

Read More
A magnifying glass uncovers an alert midway along a progress bar, representing network baselining and troubleshooting
Deep Network Observability

Proving Nothing Changed: The Most Overlooked Troubleshooting Skill

Security padlock and connecting lines in a digital environment, representing firewall change validation
Network Security

What Changed After the Firewall Update? Let the Traffic Answer

All Posts

Security Operations

NetFlow Directionality Support : Part 2

This is a continuation of Flow Directionality Support : Part 1 which should be read first. My guess is

Read More
Network Operations

NetFlow Direction and it’s Value to Troubleshooting

Determining NetFlow Direction is the process of trying to ascertain who initiated a flow.  Although “NetFlow Direction” is the

Read More