securityonion
securityonion copied to clipboard
FEATURE: Support PCAP pivots for ICMP packets in SOC and Kibana
As an analyst, I need to be able to pivot on ICMP alerts or metadata and retrieve packets. Current support is TCP and UDP.