SANS Institute - SiLK: Difference between revisions
From GCA ACT
Jump to navigationJump to search
(Created via script) |
(Updated description via script) Tag: Reverted |
||
| Line 1: | Line 1: | ||
=Description= | =Description=<br> | ||
<br> | SiLK is a toolkit for collecting, storing, and analyzing network flow data. Flow data includes information about the source and destination of traffic, the port numbers used, the amount of data Transferred, and other metadata. This data can be used to troubleshoot network security issues, locate Denial-of-service attacks, and identify potential malicious activity.=More Information= | ||
SiLK is a toolkit for collecting, storing, and analyzing network flow data. Flow data includes information about the source and destination of traffic, the port numbers used, the amount of data Transferred, and other metadata. This data can be used to troubleshoot network security issues, locate Denial-of-service attacks, and identify potential malicious activity. | |||
=More Information= | |||
<br> | <br> | ||
https://tools.netsa.cert.org/silk/ | https://tools.netsa.cert.org/silk/ | ||
[[Category:Security Information & Event Management (SIEM)]] | [[Category:Security Information & Event Management (SIEM)]] | ||
Revision as of 04:50, 23 April 2024
=Description=
SiLK is a toolkit for collecting, storing, and analyzing network flow data. Flow data includes information about the source and destination of traffic, the port numbers used, the amount of data Transferred, and other metadata. This data can be used to troubleshoot network security issues, locate Denial-of-service attacks, and identify potential malicious activity.=More Information=
https://tools.netsa.cert.org/silk/
