NextComputing CyberPro portable packet forensics appliance

NextComputing recently announced the CyberPro portable packet forensics appliance.

Within a mobile, lightweight test appliance, CyberPro offers a high-speed packet capture, indicators of compromise event alerting, BPF filter event triggering and a fully integrated analytics workflow with a collection of open source packet analysis software tools. Users can view IoC logging over a long PCAP forensic timeline and post-process PCAPS for packet analytics and visualisation.

CyberPro is designed for network performance monitoring, cyber forensics, compliance enforcement, lawful intercept and packet data analytics. It is a tool for today’s field technicians, IT/InfoSec specialists and network engineers whose mission is to keep modern digital IP networks up and running and fully protected.

It features three options for lossless packet capture: 1–3 Gbps, 3–6 Gbps and 10 Gbps. Simultaneous PCAP search and RFC anomaly logging, along with active triggers (real-time, dynamic and user-defined) are supported, along with file download hash logging, as well as multiprotocol event/metadata logging. A unified web GUI helps to manage PCAPs or an entire cyber investigation.