In this episode of the Endace Packet Forensic Files, Michael chats with with Cody Spooner, Principal Sales Engineer and DFIR expert at Corelight, about an interesting topic: the subtleties and differences of “Enablers" vs "Behaviors” of a cybersecurity compromise. Cody explains that when most people think of threat hunting or incident response investigations, they picture analysts looking for signs of malicious activity. In reality there are critical subtle differences between the “behavior o...