Being able to quickly and accurately view session data as it occurs or have it readily available for forensics investigation is key to understanding what is transpiring on your network. Some of our favorite tools and vendors are listed below.
Seeing is believingRecreating the session
Understanding the session content and the context in which it was used provides the investigator and management an understanding and view of events that are occurring on the network. Session analysis tools go beyond enforcing corporate policies, they typically lead to successfull prosecution since investigators are no longer looking at raw packet data but rather graphical sessions presented as they were orignally exectuted