Get an iPad mini, ASUS ZenScreen LED Monitor, or $350 Off with OnDemand Training thru 5/19


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Packets Don’t Lie: What’s Really Happening on Your Network?

  • Thursday, January 19, 2017 at 1:00 PM EST (2017-01-19 18:00:00 UTC)
  • Rob McCovern, Dave Shackleford


  • LogRhythm

You can now attend the webcast using your mobile device!



When it comes to detection and response, defenders require full visibility into what's traversing their network. In this webcast, senior SANS analyst and SANS trainer Dave Shackleford will discuss the outcome of his functional review of LogRhythm's Network Monitor Freemium (a free version of LogRhythm's Network Monitor product). In the review, he puts the tool through its paces to recognize contemporary threats such as bots, beaconing, unencrypted sensitive information, and ransomware.

Attend this webcast to learn:

·      Why network monitoring should be an essential component of your security and operations toolkit

·      How to automate threat detection that was previously only possible via manual packet analysis

·      To create analyst workflow that leverages forensic investigation capabilities

·      How to identify potential network threats such as port misuse or beaconing

·      To respond to incidents discovered through deep packet analysis

·      How to differentiate IT operations issues from security threats

Click Here to view the associated whitepaper written by Dave Shackleford.

Speaker Bios

Dave Shackleford

Dave Shackleford, a SANS analyst, senior instructor, course author, GIAC technical director and member of the board of directors for the SANS Technology Institute, is the founder and principal consultant with Voodoo Security. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. A VMware vExpert, Dave has extensive experience designing and configuring secure virtualized infrastructures. He previously worked as chief security officer for Configuresoft and CTO for the Center for Internet Security. Dave currently helps lead the Atlanta chapter of the Cloud Security Alliance.

Rob McCovern

Rob McGovern is a Senior Technical Product Manager at LogRhythm, Inc., focused on collecting suggestions, defining requirements, prioritizing features and deciding when “done” is really done for several engineering teams. He regularly engages with our customers and prospective customers to determine the direction for LogRhythm products. Ultimately, he views his role “as to make sure we build the right high-quality solutions for our customers at the right time.”

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.