Security Operations
How Metadata and NetFlow Analysis Supports the Kill Chain Framework
In 2011, computer scientists at Lockheed Martin established a framework that defined the steps taken by bad actors as
Read More
Network Operations
Network Incident Response with NetFlow and Metadata
I spent this week in Las Vegas at CiscoLive, where I had the good fortune to speak with and
Read More
Network Operations
A practical guide to finding NAT Traffic
In a previous post, we described how to search for NATed traffic within Scrutinizer. No matter which solution you are
Read More
Network Operations
NetFlow in Hosting
Chances are that any website you will visit today is hosted in a shared environment. If the hosting server
Read More
Netflow
Detecting BitTorrent Traffic
With all of the new movies and TV shows right around the corner, I figured it would be a
Read More
Network Operations
Detecting Social Media Traffic
Detecting social media traffic on your network can be a painless process when using certain NetFlow and IPFIX exports. In
Read More
Configuration
NetFlow API
Providing detailed visibility and contextual awareness into network traffic is essential to secure and optimize business operations. While NetFlow
Read More
Security Operations
Data Exfiltration over DNS
How many companies out there are monitoring DNS traffic? Are you concerned about data exfiltration over DNS? How many
Read More
Security Operations
Detecting Tor Traffic
Detecting TOR traffic will help identify possible infections on your network. It keeps the eyes of your network team
Read More
Netflow
sFlow vs NetFlow Comparison
I have been working with a number of customers who asked for an sFlow vs NetFlow comparison. They were
Read More