Featured Posts

Multiple data streams flow independently, but together form one fabric, representing packet replication
Network Operations

When One Packet Stream Needs to Feed Five Tools

In most environments today, one packet stream rarely serves a single purpose. Let’s say a SPAN or ERSPAN session mirrors traffic from a core switch. That same stream may ...

Read More
Radar scans a digital network, representing flow-based threat hunting
Security Operations

How Flow Data Supports Threat Hunting Without Drowning Analysts

A magnifying glass uncovers an alert midway along a progress bar, representing network baselining and troubleshooting
Deep Network Observability

Proving Nothing Changed: The Most Overlooked Troubleshooting Skill

All Posts

traci
Security Operations

How I Used Behavioral Analytics to Track Locky

In the past month I have been on a couple support calls where Locky ransomware came up. Locky sounded

Read More