Superflows: Enhancing Forensic Network Flow Analysis
The author argues that the creation of superflows, which group network flows based on specific hypotheses, can significantly improve operational network response by increasing Events Per Analysts Hour (EPAH).