Collection and Detection with Flow Data - A Follow Up

Collection and Detection with Flow Data - A Follow Up

Explore network security monitoring techniques in this 53-minute conference talk from BSides Nashville 2016. Dive into the comparison between full PCAP and flow data, learning how to build, generate, and collect flow records. Discover various flow data tools, with a focus on SILK collection architecture and FlowBAT analysis. Learn to install and use SILK for tasks like rwfilter, rwcut, and PCAP conversion. Master FlowBAT installation and analysis techniques, including filtering, stats, and dashboard creation. Gain insights on identifying services, analyzing PCAP files, and implementing network flow automation. Conclude with an introduction to Flow Plotter, enhancing your skills in applied network security monitoring.