Adapt and Response

Summary
Deferred Capture Nodes

Capturer 01 - node-demo-02 IP - 192.168.1.218

New Deferred capture node
BPF Filters

Default BPF Filter Exclude local IPs

New BPF filter
Deferred Capture Triggers

Default Trigger alarm risk higher than 10 and filter by SRC_IP

New Trigger