SentryWire
SentryWire is a full packet capture appliance and network security monitoring platform built for total network visibility across enterprise, federal, and ICS/OT environments. It retains weeks, months, or years of full-fidelity packet capture data so security teams never lose critical visibility and can investigate threats long after other tools have aged out. It captures, indexes, and retains complete packet data at scale using commodity hardware, distributed storage, and a modular architecture that supports environments ranging from lightweight virtual deployments to enterprise-scale clusters. Unlike packet sniffers that focus only on headers or metadata, SentryWire stores the entire packet stream for forensic replay, deep packet inspection, retrospective analysis, and extended historical investigation. It supports capture rates from 1 Mbps to more than 1 Tbps, with real-time logging, filtering, compression, visualization, and advanced BPF-syntax analysis.
Learn more
LiveWire
LiveWire is a high-performance network packet-capture and forensic-analysis platform that captures and stores detailed packet data across physical, virtual, on-premises, and cloud networks. It is designed to give Network-Ops and Security teams deep visibility into network traffic, from data centers to SD-WAN edges, remote sites, and cloud environments, filling in the blind spots left by telemetry-only monitoring. LiveWire delivers real-time packet capture that can be selectively stored and analyzed with advanced workflows, visualizations, and correlation tools; it can automatically detect encrypted traffic and store only what’s needed (headers or metadata), saving disk space while preserving forensics data. It supports “intelligent packet capture,” converting packet-level data into enriched flow-based metadata (called LiveFlow), which can feed into the companion monitoring platform BlueCat LiveNX.
Learn more
EndaceProbe
EndaceProbes provide Scalable, Always-On, Hybrid Cloud packet capture that enables SOC, NOC and IT teams to quickly investigate and resolve cybersecurity and network performance issues:
* Bring clarity to every incident, alert or issue with an open packet capture platform that integrates with all your commercial, open source or custom-built tools.
* See exactly what’s happening on the network so you can investigate and defend against even the toughest security threats.
* Capture vital network evidence, so you can quickly resolve Network and Application Performance issues or outages.
The EndaceProbe Platform brings tools, teams and workflows together into an integrated ecosystem:
* Full Packet Capture data available at your fingertips from all your tools.
* Built into existing workflows so teams don’t have to learn more tools.
* A powerful open platform to deploy your favorite security or monitoring tools on.
Learn more
Booz Allen MDR
Protect your network with complete visibility and layered detection. Our customized managed detection and response (MDR) service gives you advanced threat detection, investigation, and response delivered via out-of-band network sensors which provide full visibility to network communications. We focus on malicious activity happening inside and around your environment to protect you from known and unknown threats. Receive instant detection using full packet capture, blended detection tools, SSL decryption, and the advantages of Booz Allen’s Cyber Threat Intelligence service. Industry-leading threat analysts will investigate and contain your network’s security events, giving you more accurate and applicable intelligence. The Booz Allen team provides threat investigation services, contextual intelligence, reverse engineering, and the ability to write rules and custom signatures to stop attacks in real time.
Learn more
