After a security incident, with suspicious connections, or as a complement to your ongoing monitoring: an analysis of actual network communication provides additional findings for your investigation.
WHERE IT IS USED
After a security incident
The immediate measures are in place. You want to examine whether suspicious connections remain in the observed part of your network.
The analysis provides additional network findings for the further investigation by your security team or your service provider.
On an unresolved anomaly
A system contacts an unusual destination, or a data flow falls outside the normal range. You want to trace what was observed and which connections are recognisable.
The captured communication helps your team narrow down the anomaly and derive further steps of examination.
As a complement to existing monitoring
SIEM, EDR and other security tools are already in place. You want to complement their findings with the network communication captured at the measurement point.
Connections and communication patterns provide an additional perspective for your security analysis.
APPROACH
What do you want to examine, and which systems are relevant for it?
Together with your IT team we clarify the suitable connection point and the observation period.
The results give your team a basis for further investigation and measures. Analysis and responsibilities are agreed in advance.
The network analysis is carried out with AEGYS Pulse. The appliance passively captures the traffic provided at the agreed measurement point.
How the network analysis worksInvolve your IT service provider in the coordination. Together we clarify connection, analysis and responsibilities.
Let's discuss how the network analysis can fit into your service portfolio and your existing processes.
In an initial call we clarify your situation and whether a network analysis is the right next step for it.
Discuss your situationWould you like to see the value in your own environment first?
Start 21-day trial of the network analysis