SANS Institute - SiLK

From GCA ACT
Revision as of 05:05, 23 April 2024 by Globalcyberalliance (talk | contribs) (Updated via script)
Jump to navigationJump to search

Description


SiLK is a toolkit for collecting, storing, and analyzing network flow data. Flow data includes information about the source and destination of traffic, the port numbers used, the amount of data Transferred, and other metadata. This data can be used to troubleshoot network security issues, locate Denial-of-service attacks, and identify potential malicious activity.

The SiLK toolkit is made up of several components:

The flowcap tool is used to

More Information


https://tools.netsa.cert.org/silk/