Security
Run and review Suricata-backed security findings, severity summaries, and IOC exports for a capture.
The Security tab is PacketSafari's alert-focused investigation surface for a single capture.
What it shows
- A security scan summary with threat score and detector coverage
- Severity counts for critical, high, medium, low, and informational findings
- Alert lists with pivots into packets or related connections
- Indicator summaries such as IPs, domains, URLs, and hashes when available
What you can do
- Run an on-demand security scan when the capability is enabled for your account or deployment
- Refresh the summary after indexing or scanning finishes
- Filter alerts by severity and inspect alert details
- Pivot from an alert back to packets or into the Connections view
- Export IOC evidence when available
Notes
- Hosted preview tiers can show locked or reduced-detail findings.
- Paid SaaS and on-prem deployments usually expose the full alert detail set, subject to entitlement and deployment policy.
- The security view complements Stats and Connections rather than replacing them.