ConceptsNetwork Evidence
Network Evidence
Evidence collected from network sources, logs, captures, flow data, IDS alerts, that defenders use to investigate incidents and prove what happened on the wire. It is a core form of incident evidence.
8 direct links1 lesson
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
Packet
The most substantial related concept here, covered by 8 lessons.
Relatedsorted by lesson coverage
PacketStart here
8
lessons
Evidence Collection
7
lessons
Flow Data
6
lessons
Forensics
6
lessons
Log Integrity
6
lessons
Network Telemetry
6
lessons
Show 2 more connections
Related Lessons
1 lesson covers this conceptSign in to open lesson content directly.