Network security · Domain Intelligence Pack
Monitor communication paths, segmentation, service reach, and movement across cloud, campus, data center, and hybrid networks.
Overview
What the Network DIP monitors, detects, explains, and makes possible.
The Network DIP keeps live network security state, with source and time preserved.
Findings assessed for security exposure and service impact.
Review the relationships and supporting evidence behind a finding.
Domain actions Ollandi can propose, each checked against policy before it runs.
Example investigation
Follow an illustrative condition through the domain signals, assessment, proposed response, and verification.
A trusted workload begins communicating through a rare external path.
Ollandi tests an approved service change against misconfiguration, data movement, and attacker control.
A temporary localized block is validated against service dependency and rollback requirements.
The path closes without wider disruption and the result is recorded.
Coverage
Evidence keeps its source and time. Ollandi relates it to other packs, service dependencies, policy, authority, and history.
Domain Intelligence Packs
Every pack feeds the same shared state, so evidence from one domain can support or challenge another.
Domain Intelligence Pack
Monitor cloud control planes, identities, resources, posture, and exposure as one changing security state.
Learn moreDomain Intelligence Pack
Monitor human and machine identity, sessions, credentials, privilege, and access behavior across infrastructure.
Learn moreDomain Intelligence Pack
Monitor live workload execution and connect process behavior to images, deployments, identities, network paths, and services.
Learn moreDomain Intelligence Pack
Monitor endpoint processes, users, files, software changes, connections, and device health in wider infrastructure context.
Learn moreDomain Intelligence Pack
Monitor private infrastructure, directories, virtualization, storage, databases, configuration, and hybrid dependencies.
Learn moreDomain Intelligence Pack
Monitor ATM availability, dispensing, cash, hardware, communications, security events, vendors, and service obligations.
Learn moreFAQ
Rarity is one signal. Identity, workload purpose, DNS context, expected routes, and recent service changes help determine whether the communication needs investigation.
The path is related to service dependencies and reachable systems. The proposal includes the affected scope and recovery requirements before any permitted network change.
Bring a lateral-movement, egress, or segmentation incident with flow records, topology, policy, and relevant identity context.
Get started
Choose a communication path or segmentation incident and review the service effects of a proposed restriction.
