5 ms·
As a network forensic investigator, if I were to upload packet captures to a third-party, I'd almost certainly lose my job - and rightfully so. Now, the applian
by kylemaxwell 15y ago
As a network forensic investigator, if I were to upload packet captures to a third-party, I'd almost certainly lose my job - and rightfully so. Now, the appliance looks interesting for collaboration, as long as it stays in my protected environment, but I'm not sure that's necessarily the best way to go about this general task.
Other questions I'd ask: how well does it integrate with SIEMs like ArcSight? What about larger bandwidth needs, like for 10-gig networks? Can I extend the storage? How quickly does it actually search?
I've bookmarked their site for later review.
- epicmelon 15y agoGood point - I'm not sure what else would make me feel more comfortable, however. Having control of the appliance (VM or otherwise) is good enough for me.