PCAPS Or It Didn't Happen- Corey Thuen - PSW #654 - a podcast by Security Weekly

Threat hunting activities often require packet capture analysis but capturing and storing PCAP at scale is rough. This segment covers open source tools for collecting packet captures on demand within a threat hunting use case in Gravwell.

 

To learn more about Gravwell, visit: https://securityweekly.com/gravwell

To check out Packet Fleet, visit: https://github.com/gravwell/ingesters/tree/master/PacketFleet

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://wiki.securityweekly.com/PSWEpisode654

Further episodes of Paul's Security Weekly (Video-Only)

Further podcasts by Security Weekly

Website of Security Weekly