PCAPS Or It Didn't Happen- Corey Thuen - PSW #654
About this episode
Threat hunting activities often require packet capture analysis but capturing and storing PCAP at scale is rough. This segment covers open source tools for collecting packet captures on demand within a threat hunting use case in Gravwell.
To learn more about Gravwell, visit: https://securityweekly.com/gravwell
To check out Packet Fleet, visit: https://github.com/gravwell/ingesters/tree/master/PacketFleet
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://wiki.securityweekly.com/PSWEpisode654
Get every episode summarized
Each time Paul's Security Weekly (Video) publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Paul's Security Weekly (Video)
The AI "Vulnpocolypse" Is Real? - PSW #922
Paul's Security Weekly (Video)
AI Makes All Bug Shallow? - PSW #921
Paul's Security Weekly (Video)
What Is A Router? (And all things AI) - PSW #920
Paul's Security Weekly (Video)
Scanning The Internet with Linux Tools - PSW #919
Paul's Security Weekly (Video)