Real Time

Real Time summarizes the latest activity received from Red Hand Collector and links continuous traffic monitoring to the same analysis screens used throughout Red Hand Analytics.

What changes with Collector

A PCAP report is a fixed snapshot. A Collector report receives new traffic over time, updates analysis, and can include the process responsible for a connection. This makes it possible to watch behavior develop instead of choosing a capture window in advance.

Live summary

The page shows Collector identity and connection state, the amount of network data collected, the latest analysis update, newly observed activities and endpoints, and recent inbound and outbound data.

The chart groups new activities and data exchange over the recent timeframe. Use the surrounding analysis sections to investigate anything that needs more context.

Refresh behavior

Automatic refresh is active for Collector reports. Fixed PCAP reports do not need periodic refresh because their underlying data does not change.

When the browser tab returns to the foreground, Red Hand Analytics checks whether newer Collector results are available. Existing content remains visible while the refresh completes.

Process context

When the Collector can associate traffic with a local process, process details appear alongside the relevant endpoint or connection evidence. Availability depends on operating system support, permissions, and whether the process was observed during collection.

Install Red Hand Collector

Use Install Collector Now to open the installation panel. Collector supports Windows, macOS, and Linux on laptop and desktop computers. If the detected device is unsupported, the panel explains that requirement and still lets you select an operating-system tab in case detection was incorrect.

Troubleshooting live updates

If the page stops updating, confirm that the Collector is connected, the report is still online, and the browser can reach Red Hand. Then check the latest-analysis timestamp before reloading the page.