
PCAPS Or It Didn't Happen- Corey Thuen - PSW #654
adilassil
Description
<p>Threat hunting activities often require packet capture analysis but capturing and storing PCAP at scale is rough. This segment covers open source tools for collecting packet captures on demand within a threat hunting use case in Gravwell.</p> <p> </p> <p>To learn more about Gravwell, visit: <a href= "https://securityweekly.com/gravwell">https://securityweekly.com/gravwell</a></p> <p>To check out Packet Fleet, visit: <a href= "https://github.com/gravwell/ingesters/tree/master/PacketFleet">https://github.com/gravwell/ingesters/tree/master/PacketFleet</a></p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://wiki.securityweekly.com/PSWEpisode654">https://wiki.securityweekly.com/PSWEpisode654</a></p>
Uploader
Episodes
PCAPS Or It Didn't Happen- Corey Thuen - PSW #654
adilassil