Tag: Network monitoring and analysis

Monitoring and managing network traffic can be a complex task. This is where NetFlow comes into play.

Discover how to save storage space and improve data analysis using this simple methods.

Due to the prevalence of encrypted traffic in organizations, monitoring it as a technique can be particularly advantageous.

SKW and CSIRT NASK observed a wide-ranging espionage campaign related to Russian secret services.

What is threat modelling and how to design the process that can be applied to a wide range of infrastructures and business models.

How to use inter-system correlations, optimizing work of SIEM systems and processing billions of flows in dedicated system.

Each Incident handler should have a Network Visibility system in their arsenal to be able to analyse the network characteristics.

Scanning the network leaves a clear network traffic footprint. A footprint that is easy to spot by analysing NetFlow. Sounds intresting?

Tools that analyse historical data insights come to the rescue when we need to know how many internet connections they are now or tomorrow.

How could we try to detect the Resource Hijacking technique, a MITRE ATT&CK technique related to crypto mining activity?