Live network analysis

Analyze live network traffic with Red Hand Collector

Continuously monitor endpoint network activity, identify the process behind each connection, and investigate new findings in real time with the context needed to understand what is happening.

Live Continuous Enriched

Install Red Hand Collector

To install, copy and run this command in PowerShell.

irm https://api.redhand.io/install.ps1 | iex

Run PowerShell as Administrator. Administrator access is required to capture traffic from the network adapter and read information about running processes.

Red Hand Collector

See what is happening now and what develops over time.

Collector keeps the investigation current while adding the process and endpoint context needed to understand each connection.

01 · Real time

Investigate live activity, not an old snapshot.

Red Hand Analytics updates as Collector observes new connections, endpoints, activities, and data movement, keeping everything in one continuously evolving investigation.

Real-time network traffic analysis in Red Hand Analytics showing live activities, endpoints, data exchange, and analysis updates
02 · Over time

See patterns that unfold slowly.

Reveal periodic beacons, slow scans, repeated failures, gradual transfers, and multi-stage behavior that isolated events cannot reliably show.

Continuous network traffic analysis timeline showing activities developing over time
03 · Process context

Know which process made the connection.

Identify the responsible application so expected software behavior can be separated from activity that requires attention.

Live network connection analysis showing activity evidence and process attribution
Responsible processApplication identified Available live
04 · Endpoint context

Understand who is on the other side.

Add threat intelligence, ownership, reputation, popularity, and domain context to the endpoints involved in each connection.

Real-time network traffic endpoint analysis showing internal, external, flagged, and suspicious endpoints

How Red Hand Collector works

From endpoint activity to live findings.

Collector watches network activity and the processes behind it. Red Hand Analytics turns that live stream into findings you can investigate as they appear.

Open a sample report to see the findings and supporting evidence.

View an example investigation

Start monitoring

You can start monitoring live network traffic right now.

Install Collector on Windows, Linux, or macOS and investigate new activity as it happens.

Install Collector Now