Discover the NetFlow tool and how to identify elements of a security event. Working with flow records, and using StealthWatch is also covered.
SECOPS: Identifying NetFlow v5 Records
- describe NetFlow, including fields and flow records, and identify elements from a NetFlow v5 record security event
- describe flow exporting and monitoring, how to cache information, and StealthWatch
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.