1. Granularity of search, allowing faster search/seek to activity or evidence.
2. Time step to represent network activities into a controlled sequence of events for easy and faster analysis.
3. Visualize threat sources and communications using advanced graphs leveraging social network of entities
4. Advanced targeted threat detection using state-of-the-art AI/ML algorithms.

1. Network Forensics.
2. Security Incident Investigation/Analysis.

PacketWorker NF supports investigation activities by making available full extent, origin and, scope of an attack and, enabling creation of in-house threat intelligence. Analysts can review specific network packets and sessions before, during and after an attack.

1. High-speed scalable packet capture infrastructure enabling data acquisition to petabyte scale.
2. Automated integrations to deliver better investigative value by advanced content inspection using sandboxes or, static analysis techniques.
3. Comprehensive reconstruction capabilities to ensure seamless visibility into content without the need for reliance on third-party tools.
4. Comprehensive analysis & representation of IPv4 and IPv6 traffic to allow for seamless insights into network activity over any protocol.
5. Time-travel for better retrospective analysis to determine root-cause and, assess impact to business assets.

NA

NA

1. IP Traffic
2. Capture rate details.
3. Network Tap or Port-mirroring ability at capture points.
4. Hardware sized to capture rate and, retention requirements.
5. Remote connectivity for troubleshooting.