Application dependency mapping (ADM) can be automated in a network. The network can
determine whether certain nodes form a cluster of a tier of an application. The network can …

An example method can include choosing a pattern or patterns of network traffic. This
pattern can be representative of a certain type of traffic such as an attack. The pattern can be …

Systems, methods, and non-transitory computer-readable storage media for synchronizing
timestamps of a sensor report to the clock of a device. In one embodiment, the device …

An application and network analytics platform can capture telemetry from servers and
network devices operating within a network. The application and network analytics platform …

An example method can include receiving a traffic report from a sensor and using the traffic
report to detect intra datacenter flows. These intra-datacenter flows can then be compared …

An approach for establishing a priority ranking for endpoints in a network. This can be useful
when triaging endpoints after an endpoint becomes compromised. Ensuring that the most …

An approach for detecting anomalous flows in a network using header field entropy. This
can be useful in detecting anomalous or malicious traffic that may attempt to “hide” or inject …

A method includes capturing first data associated with a first packet flow originating from a
first host using a first capture agent deployed at the first host to yield first flow data, capturing …

Managing a network environment to identify spoofed packets is disclosed. A method
includes analyzing, via a first capture agent, packets processed by a first environment in a …

An application and network analytics platform can capture comprehensive telemetry from
servers and network devices operating within a network. The platform can discover flows …