Glossary: Incident Response and Resilience

flow log

Also written: flow collector

A record of network connections showing who connected to whom, when, on which port and how many bytes were sent, without the content. Firewalls and flow collectors produce them, and hunters search them for patterns such as beaconing.