This use case enables quick decisions on network data flows, traffic spikes and deviations. It helps to identify DDoS of services, volume-based Data Leakage detection and Misconfigurations based on correlation of Netflow traffic in your SIEM. Netflow Security Monitor enables real-time traffic profiling of most commonly used network services including SSH, email traffic (SMTP, POP3), HTTP/S, DNS, FTP, DB, RDP, NTP, NETBIOS and other traffic types. Historical baseline is formed for the same services and aggregated for last 30 days with traffic statistics in megabytes. Use Case includes rules, trends, live dashboards and automatic email notifications on deviations.