Start with WireTuna traffic evidence. Identify app, destination, protocol, meaning, volume, and packet details.
- Select the adapter
- Use Unknown Activity or protocol filters
- Open flow details
- Export packet rows if needed
Ask NetTools
Ask the ecosystem what to do next
This first version uses curated defensive logic. Later it can be backed by retrieval over docs, playbooks, manuals, and operator lessons.
Ask NetTools
Ask a defense question
Guided incident wizard