Capture and index network packets with time stamping and connection attributes at recording speeds up to 20 Gbps.
Consolidate alerts from other Trellix and third-party products along with all network metadata in a single workbench with immediate “one click” pivot to session data.
View and share specific network metadata and activity through easy-to-create custom dashboards and search web, email, FTP, DNS, chat, SSL connection details, and file attachments.
Hunt for anomalies or malicious, suspicious, or risky activities that may have evaded detection by your existing tools.
Search and retrieve target connections and packets quickly and conduct centralized application-level keyword, regex, and wildcard queries across all alerts, captured flow, and metadata.
Scale deployments across premises, hybrid and cloud environments to meet distributed and large enterprise requirements.