Network Traffic Analysis

Definitions

1. The study of packets, flows, timing, volumes, and communication patterns to understand normal behavior, detect anomalies, and investigate attacks. Network traffic analysis can reveal scanning, exfiltration, malware beaconing, and lateral movement even without full application logs.

   In plain English: Examining network traffic patterns to find suspicious behavior or understand communications.

   Example: "Network traffic analysis showed a regular beacon every five minutes to an otherwise unknown cloud host."

Related Terms

• Automated Threat Detection
• Canary
• Continuous Monitoring
• Detection Rule
• Disk Forensics
• Header Analysis
• Network Probe
• Packet Analysis
• Protocol Analysis
• Runtime Protection