1. Home
  2. Partners
  3. Fusion Partners
  4. Tines

Tines Stories with Always-on Packet Capture

Endace Always-on Hybrid Cloud Packet Capture Enhances Your Tines Stories For Rapid Incident Response

The most serious threats require hard evidence that exposes exactly what’s happening before, during, and after any security alert so you can confidently respond, remediate, and report.  The hard evidence exists in the network packets. Always-on network packet capture gives you a tamper-proof record of all activity across your environment, allowing you to understand and respond to any threat. Leveraging PCAP insights in your automation and workflow stories makes packet-level evidence easily accessible to your entire SoC team.

Endace Packet Capture Workflows for Tines automates the search, archive, and download of critical network evidence (PCAP) related to any threat activity. Endace always-on packet capture records weeks or months of network traffic, including zero days, APTs, and insider threats.

See it in Action

By integrating Endace Always-On packet capture into Tines stories, SecOps teams can automatically find, retrieve and store critical forensic evidence so that it is at their fingertips when they need it.

Capture every threat, breach and outage

Recall every network activity with perfect clarity. Always on packet capture means you always have the data you need.

Visibility across your entire hybrid network

Record weeks to months of traffic from across your distributed, on-premise, public and private cloud network.

Faster investigation and response

Rapid, centralized search and data-mining puts conclusive forensic evidence at your fingertips in seconds not hours.

Powerful forensics

Quickly and accurately reconstruct events, analyze pcap data and reassemble files with InvestigationManager.

Enterprise-class scalability

Your entire estate of EndaceProbes, physical and cloud, managed centrally, with network-wide investigations from a single pane-of-glass.

Fits the way you work

Endace’s prebuilt integrations with Tines and other tools in your environment provides one-click access to full packet data for streamlined workflows.

Want to know more? Read the Solution Brief

To learn more about the benefits of deploying Endace hybrid cloud packet capture with Tines Stories read the Solution Brief.

Tines Story Example

Download this Tines Story to see an example of receiving intrusion alerts from Elastic when unusual activity is detected, followed by collecting information from an EndaceProbe on the affected firewall formatting a PCAP file containing the network traffic for the time period. 

About Tines

Learn more about Tines workflow automation for security teams.

How about a demo?

Interested in finding out how combining Tines Stories and Endace Always-on Hybrid Cloud Packet Capture enhances your rapid incident response?

Get a demo