📄️ Encapsulation
Encapsulation is the process of wrapping data or protocol information inside additional protocol headers as traffic moves through networking layers, tunnels, overlays, or transport mechanisms.
📄️ Encrypted traffic analytics
Encrypted traffic analytics is the practice of analyzing encrypted network communications without decrypting payloads, using observable metadata, TLS handshake information, flow behavior, and traffic patterns to detect threats and assess operational risk.
📄️ Endpoint detection and response
Endpoint detection and response (EDR) is a security approach that continuously monitors endpoints for suspicious behavior, supports threat investigation, and enables incident-response actions on devices such as laptops, servers, and workstations.
📄️ Endpoint monitoring
Endpoint monitoring is the process of observing endpoints such as laptops, servers, workstations, or virtual machines for operational health, user activity, security events, and network behavior.
📄️ Endpoint visibility
Endpoint visibility is the ability to continuously discover, monitor, and understand the operational state, behavior, and security posture of endpoints connected to a network.
📄️ Explore Flows
Explore Flows is an investigative workflow that allows analysts to browse, filter, and investigate related network flow records starting from a selected host, conversation, interface, application, or traffic event.