Network Forensics


S.No	Request URI	Actions Allowed	Actions Performed
1	/networkforensics/<ipaddress>? startime=<start_time>&& duration=<duration>&& ntba=<ntb a _id>	`GET`	Retrieves the host summary for given IP address. URL Parameter 1: ipaddress Query Parameter1: starttime= Date in the format yyyy-MMM-dd HH:mm Query Parameter 2: duration = NEXT_60_SECONDS NEXT_5_MINUTES NEXT_60_MINUTES NEXT_30_MINUTES Query Parameter 3: ntba id
2	/networkforensics/<ipaddress>/ suspiciousflows ?startime=<start_time> &&duration=<duration>&& ntba=<ntba_id>	`GET`	Retrieves the top suspicious flows for the given IP address. URL Parameter 1: ipaddress Query Parameter1: starttime= Date in the format yyyy-MMM-dd HH:mm Query Parameter 2: duration = NEXT_60_SECONDS NEXT_5_MINUTES NEXT_60_MINUTES NEXT_30_MINUTES Query Parameter 3: ntba id