Glossary: Logs and Data Sources for Investigations

TCP (Transmission Control Protocol)

Also written: TCP

The protocol that carries connections such as SSH and web traffic. Its flags, like SYN, show up in firewall logs and flow records.