3 ms·
There are companies that mirror their traffic to storage for a few days to be able to look back and troubleshoot issues. ALL their traffic, proactively.
by unethical_ban 14d ago
There are companies that mirror their traffic to storage for a few days to be able to look back and troubleshoot issues. ALL their traffic, proactively.
- idiotsecant 14d agoI do that with very, very low traffic industrial automation systems.
- deleted 14d ago[deleted]
- collinmanderson 14d agoFor US federal government, "Office of Management and Budget" says to store 72 hours of packet capture, since 2021 (partially in response to SolarWinds attack). (M-21-31) https://www.cisa.gov/sites/default/files/2023-02/TLP%20CLEAR%20-%20Guidance%20for%20Implementing%20M-21-31_Improving%20the%20Federal%20Governments%20Investigative%20and%20Remediation%20Capabilities_.pdf https://www.cisa.gov/sites/default/files/2023-02/TLP%20CLEAR...