search menu icon-carat-right cmu-wordmark

Network Traffic Analysis with SiLK

This handbook makes it more analyst-focused and teach not only the toolset but also the tradecraft around using it.

Software Engineering Institute


The previous version of the guide, which was published in 2014, is organized by the individual tools in the SiLK tool suite. The new version of the guide is written from the perspective of the network traffic analyst. As such, the handbook is organized according to the workflow that we recommend analysts follow to investigate network activity and anomalies.