Tag: Blog

Selected network and security alerts from Sycope can be sent to Splunk, making Sycope detections available alongside other operational and security data used by SOC teams.

Learn how passive inventory differs from active scanning and why continuous traffic observation provides a more complete view of the network.

See how flow-based network visibility helps detect lateral movement, C2 beaconing, and other signs of attackers operating inside the network after bypassing the firewall.

Discover how flow-based detection helps uncover hidden threats in OT networks — without agents, active scanning or the risk of disrupting industrial processes.

See how NetFlow helps security teams reconstruct the full attack path, trace lateral movement, identify command-and-control patterns and estimate data exfiltration using historical network evidence.

See what architectural decisions stand behind LinkSense — a lightweight, open-source synthetic monitoring tool based on the agent–server model, Rust and SQLite.

In this article, we explain how to combine NetFlow, retrospective PCAP and packet analysis to identify suspicious communication faster, reconstruct the course of incidents and document response activities more effectively.

See how LinkSense helps monitor the availability, performance and health of services in distributed environments — without unnecessary complexity or vendor lock-in.

In this article, we look at NIS2 from the perspective of monitoring: what an organization needs to see, what data it must be able to analyze, and why simply having security tools in place does not yet mean operational readiness.

The new Sycope integration with Atlassian Jira allows tickets and incidents to be created directly from network alerts. The Microsoft Power Automate option helps reduce duplicates by adding recurring alerts as comments to existing tickets.