Threat Hunting with AWS Virtual Private Cloud (VPC) Flow data

This dashboard breaks up the network traffic data into the following sections for easier analysis.

Sections of this dashboard include the following:

Total MB Sent Per Destination Port

Non-Web Traffic Sources (Map)

Suspicious Infil/Exfil Detection

Point-to-Point Inbound Traffic by Total Bytes
Point-to-Point Outbound Traffic by Total Bytes

Vulnerable Inbound/Outbound Detection

Inbound Traffic by Port
Outbound Traffic by Port
Top 10 Inbound Connections by IP over Port
Top 10 Outbound Connections by IP over Port
Internal Traffic