Packets or It Didn’t Happen: Network-Driven Incident Investigations

This paper examines use cases for network monitoring (including in cloud environments) and how organizations can use it to drive incident investigations. Discover what an intelligent packet capture system can do for your security program.

By

May 18, 2021

Login to download

I consent that SANS may provide my contact information to a third-party sponsor of this white paper, and that the sponsor may contact me to describe their goods and services related to this white paper.

By providing this information, you agree to the processing of your personal data by SANS as described in our Privacy Policy.

All papers are copyrighted. No re-posting of papers is permitted

Sponsored By

Related Webcast

Packets or It Didn't Happen: Network-Driven Incident Investigations

The way we handle incident response has changed in recent years. With it, so has the role of network data in incident response investigations. In this webcast, SANS Senior Instructor Jake Williams and Symantec's Broadcom's Alan Hall examine the use of network traffic capture in today's incident...

Related Content

DFIR - Blog - Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence

Due to the notoriety SCATTERED SPIDER and The Com have attracted as prolific cybercriminal threats, law enforcement has been tracking them closely.

DFIR - Blog - The Importance of Cyber Threat Intelligence- Insights from Recent Nobelium Attacks_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

The Importance of Cyber Threat Intelligence: Insights from Recent Nobelium Attacks

The persistent and sophisticated attacks by Nobelium highlight the critical role of cyber threat intelligence.

DFIR_ICON_(1).PNG

ics blog image.png

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

A Visual Summary of SANS ICS Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS ICS Security Summit 2024