DC0078 Network Traffic Flow
Summarized network packet data that captures session-level details such as source/destination IPs, ports, protocol types, timestamps, and data volume, without storing full packet payloads. This is commonly used for traffic analysis, anomaly detection, and network performance monitoring.
01
detects techniques (165)
ATT&CK techniques this enables or maps to.
showing 20 of 165
02
source
Where this definition is published.