Use case · Enterprise & Campus · OT & ICS
Investigation from alert to evidence
Conclusions an analyst can defend, with the evidence attached.
- 01
Challenge
Incident response depends on evidence that was never recorded or is spread across five tools.
- 02
What WireTrace sees
Decoded protocol fields and flow records around the alert, plus packet captures recorded on demand from sensors.
- 03
What WireTrace understands
A timeline of before, during and after, with related detections grouped into a case.
- 04
What WireTrace decides
Each conclusion shows supporting and contradicting evidence and a confidence.
- 05
Integration / action
Reports on the appliance for six audiences, as PDF; findings available through the API.
- 06
Outcome
Conclusions an analyst can defend, with the evidence attached.
See it on your network.
A WireTrace evaluation runs on a mirror port, on your infrastructure, and shows your own devices, communications and risks.