Sold by: ExtraHop Â
Deployed on AWS
ExtraHop Packet Basics is a free PCAP offering for forensic investigations, incident response, and threat hunting.
Overview
Forensic investigation is more critical than ever as organizations navigate the landscape of a post-compromise world. Attacks evolve daily, and the number of advanced threats security teams are forced to confront continues to rise. The new realities of cloud and hybrid security also show the value of incident response. With ExtraHop Packet Basics, cloud-focused security teams now have the forensic detail they need to get to ground truth or to fulfill chain-of-custody requirements.
Highlights
- Enhances incident response workflows with instant access to network packets.
- Reduces the amount of time, effort, and expense required for PCAP in the cloud.
- Enables PCAP only for the packets needed for incident response and more.
Details
Sold by
Categories
Delivery method
Delivery option
ExtraHop Packet Basics Appliance (Recommended)
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 7.6.0-r2
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m5.xlarge Recommended | $0.00 |
Vendor refund policy
The product is free and you can cancel at any time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
You can log in to Packet Basics from a web browser at https://<management_ip>/extrahop. The username is setup and the password is the instance ID (the string of numbers after the i).
For more information, visit https://forums.extrahop.com/c/packet-basics/Â
Support
Vendor support
Support is available through the ExtraHop-hosted Community Forums.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Reveal(x) 1100v (BYOL)
By ExtraHop
The ExtraHop Cloud Platform delivers real-time visibility into all cloud traffic, backed by advanced machine learning which provides a simplified workflow for incident investigation and immediate response within small VPC deployments.
Reveal(x) 6100v (BYOL)
By ExtraHop
The ExtraHop Cloud Platform delivers real-time visibility into all cloud traffic, backed by advanced machine learning which provides a simplified workflow for incident investigation and immediate response within small VPC deployments.
Reveal(x) 8200v (BYOL)
By ExtraHop
The ExtraHop Cloud Platform delivers real-time visibility into all cloud traffic, backed by advanced machine learning which provides a simplified workflow for incident investigation and immediate response within small VPC deployments.
Quickly identify, investigate, and respond to threats with SaaS-based RevealX, an agentless network detection and response (NDR) solution for cloud and hybrid security.
Customer reviews
0 ratings
0 AWS reviews
|
2 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Telecommunications
A very good tool to help you out for end to end IT service's health monitoring and trouble shooting
Reviewed on Apr 03, 2018
Review provided by G2
What do you like best about the product?
The capability of deep dive into any OSI Layer's protocol to match your pre-configured triggers for abnormal network pattern and potential issue and generate alarms and report for you to quick action.
What do you dislike about the product?
Basically from technical perspective I don't see any weakness however not sure if the cost is high or not as I'm just a user and not the business owner in my organization.
What problems is the product solving and how is that benefiting you?
I've been using extrahop for a couple of years to monitor the network and application performance of our offshore call center's VPN and Citrix/VDI solutions, giving me the best solution to quick respond to any network and application performance degrade and trouble shoot the issue in protocol/transaction layer.
Charles C.
I'd take an extra hop to utilize extrahops services
Reviewed on Apr 04, 2016
Review provided by G2
What do you like best about the product?
Due to every transaction happening and being able to be seen as wire data, analyzing this information can provide insight into every single event that happens on a network. You are able to see performance by tier and troubleshoot precisely by what the issue is. Wire data analytics allows a holistic view of every transaction that happens on a network and be able to see that information in a structured way.
What do you dislike about the product?
Although there is a slew of reputable and fantastic clients for extrahop, I myself think its running a bit expensive for over 7k for a 1 yr subscription.
What problems is the product solving and how is that benefiting you?
We receive network traffic, and then performs real-time full-stream reassembly to extract application-level protocol metrics and other custom-specified information contained in the transaction payload. IT operations teams use this data to monitor the performance of the applications running on the network and detect anomalous behavior that could indicate a data breach, for example.
Recommendations to others considering the product:
This is not a bad route to go, so I'd consider using it on a trial basis like myself. I think with some time and effort into implementing it and taking it seriously you may have a winner here.