Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

EndaceProbes deliver a flawless record of Network History, enabling the resolution of Cybersecurity, Network, and Application challenges. They provide transparency for every incident, alert, or issue through a packet capture platform that seamlessly integrates with various commercial, open-source, or custom tools. Gain a clear view of network activities, allowing for thorough investigations and defenses against even the most formidable Security Threats. Capture essential network evidence effectively to expedite the resolution of Network and Application Performance problems or outages. The open EndaceProbe Platform unifies tools, teams, and workflows into a cohesive Ecosystem, making Network History readily accessible from all your resources. This functionality is embedded within existing workflows, eliminating the need for teams to familiarize themselves with new tools. Additionally, it serves as a robust open platform that allows the deployment of preferred security or monitoring solutions. With the capability to record extensive periods of searchable, precise network history across your entire infrastructure, users can efficiently manage and respond to various network challenges as they arise. This comprehensive approach not only enhances overall security but also streamlines operational efficiency.

Description

Xplico is a prominent tool featured in many leading digital forensics and penetration testing distributions, including Kali Linux, BackTrack, DEFT, Security Onion, Matriux, BackBox, CERT Forensics Tools, Pentoo, and CERT-Toolkit. It supports simultaneous access for multiple users, allowing each to manage one or several cases effectively. The interface is web-based, and its backend database options include SQLite, MySQL, or PostgreSQL. Additionally, Xplico can function as a Cloud Network Forensic Analysis Tool. Its primary objective is to extract application data from internet traffic captures, such as retrieving emails via protocols like POP, IMAP, and SMTP, along with HTTP content, VoIP calls through SIP, and file transfers using FTP and TFTP from pcap files. Importantly, Xplico is not classified as a network protocol analyzer. As an open-source Network Forensic Analysis Tool (NFAT), it organizes the reassembled data with an associated XML file that distinctly identifies the data flows and the corresponding pcap file. This structured approach enables users to efficiently analyze and manage the data extracted from network traffic.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Cisco SecureX
Corelight
Darktrace
FortiNDR
Fortinet
Keysight Application Threat Intelligence
LogRhythm SIEM
Microsoft Sentinel
MySQL
Network Critical
Palo Alto Networks AutoFocus
Palo Alto Networks Next-Generation Firewalls
Plixer One
SQLite
Snort
Splunk Enterprise
Splunk Enterprise Security
Sumo Logic
Tines
Wireshark

Integrations

Cisco SecureX
Corelight
Darktrace
FortiNDR
Fortinet
Keysight Application Threat Intelligence
LogRhythm SIEM
Microsoft Sentinel
MySQL
Network Critical
Palo Alto Networks AutoFocus
Palo Alto Networks Next-Generation Firewalls
Plixer One
SQLite
Snort
Splunk Enterprise
Splunk Enterprise Security
Sumo Logic
Tines
Wireshark

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Endace

Founded

2001

Country

Global

Website

www.endace.com

Vendor Details

Company Name

Xplico

Founded

2007

Website

www.xplico.org

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

Alternatives

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec
Omnipeek Reviews

Omnipeek

LiveAction
WinDump Reviews

WinDump

WinPcap
Capsa Reviews

Capsa

Colasoft