{"id":15085,"date":"2016-11-04T14:11:27","date_gmt":"2016-11-04T14:11:27","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2016\/11\/04\/how-to-observe-threats-on-your-network\/"},"modified":"2026-08-08T17:59:30","modified_gmt":"2026-08-08T17:59:30","slug":"how-to-observe-threats-on-your-network","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","title":{"rendered":"How to observe threats on your network"},"content":{"rendered":"\n<p>One of, if not the most, important aspects of cybersecurity is resilience\u00a0\u2014\u00a0the ability to continue fighting through an attack. Within this construct, there is also an intelligence aspect, which is the ability to observe adversaries&#8217; behavior inside one\u2019s network to gain insights on their tactics, techniques and procedures.<br\/><br\/>&#8220;One of the things that is of interest lately is\u00a0\u2014\u00a0I don\u2019t know what we call it [today], it used to be called honeypots\u00a0\u2014\u00a0now it\u2019s really more just kind of a general obfuscation, right? Where can you have sections of your network that are supposed to be completely transparent to the everyday user but serve as almost kind of a trip wire,&#8221; Giorgio Bertoli, senior science and technology manager at the Intelligence and Information Warfare Directorate of the Army&#8217;s\u00a0<span class=\"st\">Communications-Electronics Research, Development and Engineering Center (CERDEC)<\/span>, told C4ISRNET at the annual MilCom conference in Baltimore, Maryland, on Wednesday. &#8220;The fundamental issue is your intrusion detection system is only as good as the signature attached. Yes, anomaly detection is always something that\u2019s been promised, but it always has a fundamental flaw of false positive rates.&#8221;<br\/><br\/>The question, he said, then becomes: Can software silently run on a network until something abnormal is noticed via a trip wire of sorts? This &#8220;could also help with how were they tripped, what techniques did somebody use to get to those systems in the first place and help in that regard,&#8221; he said.<br\/><br\/>This notion of observation to gain greater insight is also something that&#8217;s taught and exercised by the military in large-scale training exercises. Previously, where traffic may have simply been blocked, portions of the network are cordoned off as a means of learning about malware.<br\/><br\/>&#8220;Let\u2019s be able to cordon off an element of the network to see the malware develop,&#8221; Lt. Gen. Paul Nakasone, then-commander of the Cyber National Mission Force, <a href=\"http:\/\/www.c4isrnet.com\/story\/military-tech\/cyber\/2016\/07\/07\/can-gaming-drive-integratation-between-cyber-traditional-military-forces\/86817944\/\" target=\"_blank\" title=\"Link: http:\/\/www.c4isrnet.com\/story\/military-tech\/cyber\/2016\/07\/07\/can-gaming-drive-integratation-between-cyber-traditional-military-forces\/86817944\/\">told<\/a> reporters regarding participant actions during the annual Cyber Flag exercise. &#8220;What\u2019s the malware actually like? \u2026 This is a maneuver force and we are a learning organization. So how do we learn? We learn based upon being able to replicate the threat and then be able to maneuver our forces to see what type of effect we can achieve.&#8221; <br\/><br\/>Nakasone is now the commander of Army Cyber Command.<br\/><br\/><\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\">Network segmentation, or the ability to separate portions of a network that become infected from an attack, are a fundamental strategy,\u00a0Bertoli said.\u00a0&#8220;Quarantining we call it. One of the big challenges is figuring out what is actually critical within your network. What are the true, critical systems that you can try to cordon off? The question becomes: The moment you know that something has been compromised, can you quarantine those core systems from the rest of the networks so that they are protected&#8221; from an attack?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s not feasible to simply unplug our devices when something goes wrong, said Donald Coulter, Space and Terrestrial Communications Directorate team lead at CERDEC, during a panel at MilCom.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The force must continue to &#8220;fight the fight,&#8221; he said, by looking at technology that focuses on obfuscation, deception and evasion of cyber activities as well as leverage artificial intelligence to more effectively analyze behavior and activity on the network to better respond to incidents on the network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Certain automation methods along these lines, including integrated adaptive cyber defense\u00a0\u2014\u00a0which, among other things, creates the ability to quickly and automatically share information\u00a0\u2014\u00a0can literally take the place of a honeypot.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;I won\u2019t need a honeypot anymore because this actually happened in another section or another network somewhere, and that information is now being shared across all these other networks,&#8221; Ryan Gunst, program manager at Space and Naval Warfare Systems Command, said during a panel discussion at MilCom regarding what an integrated, automated cyber defense approach brings. &#8220;There is a real honeypot; it is the actual network, and then all the mitigation activities that we did to mitigate that are also now being translated across the enterprise and put in place so that if you do see it somewhere else you don\u2019t have to go manually take those actions anymore.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, purposely sitting back to observe adversarial behavior on one\u2019s network for intelligence purposes must be properly coordinated, said Neal Ziring, technical director for the U.S. National Security Agency&#8217;s capabilities division, said during the same panel. If done manually without orchestration &#8220;there\u2019s human error, and then you might tip off your adversary that you\u2019re watching,&#8221; he said.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights. <\/p>\n","protected":false},"author":7,"featured_media":47341,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":26,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10,29,26],"tags":[],"coauthors":[3268],"class_list":["post-15085","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-home","category-special-reports"],"acf":{"subheadline":"","legacy_arc_id":"ZCBHIN47DRGQDAGPAAHN62OESU","arc_canonical_url":"\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to observe threats on your network - C4ISRNet<\/title>\n<meta name=\"description\" content=\"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to observe threats on your network\" \/>\n<meta property=\"og:description\" content=\"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2016-11-04T14:11:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T17:59:30+00:00\" \/>\n<meta name=\"author\" content=\"Mark Pomerleau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Pomerleau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"How to observe threats on your network\",\n\t            \"datePublished\": \"2016-11-04T14:11:27+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:59:30+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/\"\n\t            },\n\t            \"wordCount\": 763,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635963283662718136-thinkstockphotos-93869818jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\",\n\t                \"Home\",\n\t                \"Special Reports\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/\",\n\t            \"name\": \"How to observe threats on your network - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635963283662718136-thinkstockphotos-93869818jpg.jpg\",\n\t            \"datePublished\": \"2016-11-04T14:11:27+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:59:30+00:00\",\n\t            \"description\": \"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635963283662718136-thinkstockphotos-93869818jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635963283662718136-thinkstockphotos-93869818jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/2016\\\/11\\\/04\\\/how-to-observe-threats-on-your-network\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Special Reports\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/special-reports\\\/\",\n\t                    \"ad_zone\": \"special-reports\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"How to observe threats on your network\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to observe threats on your network - C4ISRNet","description":"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","og_locale":"en_US","og_type":"article","og_title":"How to observe threats on your network","og_description":"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","og_site_name":"C4ISRNet","article_published_time":"2016-11-04T14:11:27+00:00","article_modified_time":"2026-08-08T17:59:30+00:00","author":"Mark Pomerleau","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mark Pomerleau","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"How to observe threats on your network","datePublished":"2016-11-04T14:11:27+00:00","dateModified":"2026-08-08T17:59:30+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/"},"wordCount":763,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635963283662718136-thinkstockphotos-93869818jpg.jpg","articleSection":["Cyber","Home","Special Reports"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/","name":"How to observe threats on your network - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635963283662718136-thinkstockphotos-93869818jpg.jpg","datePublished":"2016-11-04T14:11:27+00:00","dateModified":"2026-08-08T17:59:30+00:00","description":"Even if threats are detected on the network, sometimes, observing them rather than expelling them can deliver a raft of insights.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635963283662718136-thinkstockphotos-93869818jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635963283662718136-thinkstockphotos-93869818jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/2016\/11\/04\/how-to-observe-threats-on-your-network\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Special Reports","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/special-reports\/","ad_zone":"special-reports"},{"@type":"ListItem","position":3,"name":"How to observe threats on your network"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635963283662718136-thinkstockphotos-93869818jpg.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15085","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=15085"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15085\/revisions"}],"predecessor-version":[{"id":15087,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15085\/revisions\/15087"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=15085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=15085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=15085"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=15085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}