Not Your Grandma's Packet Capture

Just as networks have changed, so too have packet capture solutions. This paper provides examples of packet capture value for investigations, threat detection, and even identifying operational issues.

By

November 1, 2021

Login to download

I consent that SANS may provide my contact information to a third-party sponsor of this white paper, and that the sponsor may contact me to describe their goods and services related to this white paper.

By providing this information, you agree to the processing of your personal data by SANS as described in our Privacy Policy.

All papers are copyrighted. No re-posting of papers is permitted

Sponsored By

Related Webcast

Not Your Grandma’s Packet Capture!

Just as networks have changed, so too have packet capture solutions. Modern packet capture solutions can identify the traffic that analysts can't decrypt and stop storing additional traffic to increase retention. Some can even send traffic to other devices that can ingest packet capture data,...

Related Content

Security Awareness, Cybersecurity Leadership, Cloud Security, Open-Source Intelligence (OSINT), Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, CyberLive, Workforce Development, Career Development, Why Certify, Imposter Syndrome, NetWars, Mentorship, Job Hunting, Operating System & Device In-Depth, Artificial Intelligence (AI)

A Visual Summary of SANS New2Cyber Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2024

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming

January 31, 2024

Continuous Purple Teaming: A Practical Approach for Strengthening Your Offensive Capabilities

This post will guide you through actionable strategies to implement adversary emulation effectively with some concrete examples.

Jeroen Vandeleur

Purple Team, Offensive Operations, Pen Testing, and Red Teaming

Purple Teaming and Threat-Informed Detection Engineering

In the first two webcasts of this Purple Team series, we covered how to run your first Purple Team Exercise and how to Operationalize your Purple Team. You may have noticed that a common process in Purple Teaming is detection engineering. In this blog, we go into the items discussed in our third...

Jorge Orchilles