Cyber Intelligence

Cases using this module, and the shared sample view. Start a case to attach a capture.

NETWORK OBSERVATORY / SYNTHETIC CAPTURE

Packet capture

Analysis works on capture files. A browser cannot capture arbitrary network traffic.

Analysis job

Not analysed

Sample resultsIllustrative output for synthetic capture office-gw-0912.pcapng. Not results from your selected file.

Flow explorer

4 flows
SourceDestinationProtoPacketsFirstLast
10.0.4.17:51522203.0.113.45:443TLS482022:00:1404:59:02
10.0.4.17:5301110.0.0.2:53DNS42822:00:1304:59:01
10.0.4.22:49810198.51.100.10:443TLS61209:12:4009:20:11
10.0.4.31:60122192.0.2.80:80HTTP40211:04:0211:04:40

10.0.4.17:51522 → 203.0.113.45:443

Illustrative High

Illustrative repeated outbound sessions; periodicity is a review signal, not proof of malware.

Source: office-gw-0912.pcapng · 22:00:14–04:59:02 · 4820 packets

10.0.4.17

203.0.113.45

10.0.0.2

10.0.4.22

198.51.100.10

10.0.4.31

192.0.2.80

ILLUSTRATIVE TOPOLOGY / NOT LIVE TRAFFIC

Protocol breakdown (packets)

  • TLS6,120
  • DNS1,844
  • HTTP402
  • ARP260
  • Other684

Connection window · TLS

22:00:1404:59:02

10.0.4.17:51522 → 203.0.113.45:443

4,820 packets in supplied sample flow. No per-minute measurements available.

Indicators

This page shows the shared sample view. Open a case to see its own cyber findings.

Associated investigations

CX-2026-0141UPI collect-request impersonationUPI / payment fraud · Navrangpura, Ahmedabad OpenCX-2026-0133Periodic outbound connections from office workstationCyberattack / intrusion · SG Highway, Ahmedabad OpenCX-2026-0125Remote door unlock followed by warehouse break-inCyber-physical incident · Bopal, Ahmedabad Open