Stealthwatch, to me, is like having a Network Detective working in my very own network!  I truly love Stealthwatch and I am playing with every chance I can get.

Disclaimer:   I do not get commissions from you buying Stealthwatch nor am I part of the Cisco Business Unit for Stealthwatch.  I just really honestly and for realsies super love it.

I tossed together a ~31 minute YouTube.  Obviously you can watch the entire thing.  Or… here you go for the big sections.

• Overview – Start to 1:03
• My 3 Favorite GUIs and What they Have in Common – 1:04 to 2:48
• Being a Network Detective –  2:49 to 4:30
• My First Time Playing with Stealthwatch – 4:31 to 5:44
• Knowledge is Key – 5:45 to 5:59
• Securing the Network has Changed – 6:00 to 6:32
• They Are Inside the Network – 6:33 to 7:41
• The Attack Surface We Need to Protect Is Expanding – 7:42 to 13:28
• Industry Averages: 191 days to detect a Breach, 66 days to contain a breach, $3.62M cost of a data breach – 13:29 to 15:52
• Network Breached –  15:53 to  17:08      (blooper at 16:08 in)
• Example: Terminal Server sending Traffic Out Internet –  17:09 to 17:39
• Fact#1: You Can’t Protect What You Can’t See -17:40 to 17:47
• Fact#2: The Network Sees Everything – 17:48 to 18:05
• Enlist the Network:  Deputize the Network Devices  18:06 to 19:14
• Deputize the Network:  19:15 to 21:49
• The Network Detective’s General Ledger  21:50  to 26:27
• Your Network Detective Command Console 26:28 to 28:33
• Know Every Host…. See Every Conversation… Understand what is Normal… Be Alerted to Change… Respond to Threats Quickly   – 28:34 to
• Wrap Up and Addl Info – 29:01 to end