← Security+ glossary

NetFlow (network flow analysis)

A protocol for collecting metadata about network flows: who communicates with whom, using which protocol, when and with how much data. It does not record the packet payload, but it is extremely useful for detecting anomalies, beaconing and data exfiltration.

All Security+ guides →