Continuum Advantage - Getting Started
1.
Determine what you need for a computer or server based on lossless capture rates between <1Gbps to <=10Gbps aggregate. Click here to view the hardware requirement matrix.
2.
Determine how you want to set up your capture interfaces (1) or (2) to a span or tap ports with these example DELL, HP, Cisco, Gigabyte, and NextComputing NextServer-X QuickStart documents:
3.
If you have existing PCAP or PCAP-NG files in a Linux server files system, ingest these PCAP files via our active Rsync capability and the Continuum Advantage will use their original timestamps and index them, generate enriched metadata, and generate alerts and events based on Suricata signatures and threat intelligence uploaded into the Continuum Advantage and do the same workflows as if yours were capture packets on the wire. A summary of this rsync setup for (1) active network interface is summarized here:
Continuum Advantage RSYNC ingest of existing PCAP and PCAP-NG files
4.
Follow the setup instructions including set your CPU BIOS setting to Hyperthreading and install RedHat or CentOS and configure your capture store per this document:
Continuum Advantage CentOS Installation Guide
5.
6.
7.
Upon confirmation receipt email back, within 2-8 hours receive an email with technical support contacts, Zendesk ticketing system for Q/A, and credentials to your password protected sharefile for you to create credentials and to download the following:
- Continuum Advantage UI and User Manual
- Continuum Advantage REST API programmers manual
- Continuum Advantage sfs binary for install
- Continuum Advantage installation and setup guide
8.
NOC: Start using the tool for Network Operations performance forensics analysis workflows (example step by step workflows include):
- Network Topology Workflow
- TCP Flow State and Flow Aging Analysis
- Network Performance Analysis and Investigation Workflow
- DSCP Network Performance Metrics Investigation Search Workflow
- DNS Transaction Analysis Workflow
- Investigation Workflow
- Follow the Stream Workflow
- Search Workflow
- DNS Transaction Analysis
9.
SOC: Start using the tool for (SOC) Cyber Operations and threat hunting forensics analysis workflows (example step by step workflows include):