# packet capture

Published articles for packet capture.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Chasing AMMYY at Splunk .conf

DevFeed: [Chasing AMMYY at Splunk .conf](<https://devfeed.tech/articles/chasing-ammyy-at-splunk-conf-77265.md>)

Original publisher: [Read original article](<https://blogs.cisco.com/security/conf26-agentic-soc-chasing-ammyy>)

Author: Adam Kilgore

Published: 2026-10-08T15:00:59Z

Content type: article

Language: en

Sources: [Cisco Blogs](<https://devfeed.tech/sources/cisco-blogs.md>)

Topics: [ARKTunnel](<https://devfeed.tech/topics/arktunnel.md>), [Nitro Isolation Engine](<https://devfeed.tech/topics/nitro-isolation-engine.md>), [Splunk Enterprise Security](<https://devfeed.tech/topics/splunk-enterprise-security.md>), [Scapy](<https://devfeed.tech/topics/scapy.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [cisco-secure-access](<https://devfeed.tech/tags/cisco-secure-access.md>), [cisco-secure-firewall](<https://devfeed.tech/tags/cisco-secure-firewall.md>), [cisco-talos](<https://devfeed.tech/tags/cisco-talos.md>), [conf](<https://devfeed.tech/tags/conf.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-detection](<https://devfeed.tech/tags/malware-detection.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [packet](<https://devfeed.tech/tags/packet.md>), [packet-capture](<https://devfeed.tech/tags/packet-capture.md>), [rat](<https://devfeed.tech/tags/rat.md>), [security](<https://devfeed.tech/tags/security.md>), [security-operations-center](<https://devfeed.tech/tags/security-operations-center.md>), [soc](<https://devfeed.tech/tags/soc.md>), [splunk](<https://devfeed.tech/tags/splunk.md>), [splunk-cloud](<https://devfeed.tech/tags/splunk-cloud.md>), [splunk-enterprise-security](<https://devfeed.tech/tags/splunk-enterprise-security.md>), [thousandeyes](<https://devfeed.tech/tags/thousandeyes.md>), [tls](<https://devfeed.tech/tags/tls.md>), [traffic](<https://devfeed.tech/tags/traffic.md>), [visibility](<https://devfeed.tech/tags/visibility.md>)

### AI overview

At Splunk .conf, Cisco's Encrypted Visibility Engine detected Flawed AMMYY RAT traffic by comparing HTTP and HTTPS session fingerprints. The article explains how HTTP packet details raised detection confidence and how Endace packet capture showed an HTTP download request receiving a redirect to HTTPS. The initial download over HTTP was unsuccessful; further endpoint analysis would be needed to verify whether the HTTPS request succeeded or installed the file.

### Source excerpt

Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption.

## From RAG to RAG Fusion to RAPTOR An AI Development Journey

DevFeed: [From RAG to RAG Fusion to RAPTOR An AI Development Journey](<https://devfeed.tech/articles/from-rag-to-rag-fusion-to-raptor-an-ai-development-journey-66197.md>)

Original publisher: [Read original article](<https://www.youtube.com/watch?v=FS7wZn-OQZw>)

Published: 2024-03-30T12:00:00Z

Content type: tutorial

Language: en

Sources: [Automate Your Network](<https://devfeed.tech/sources/automate-your-network.md>)

Topics: [Retrieval Augmented Generation (RAG)](<https://devfeed.tech/topics/retrieval-augmented-generation-rag.md>), [AI search](<https://devfeed.tech/topics/ai-search.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-development](<https://devfeed.tech/tags/ai-development.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [chatgpt4](<https://devfeed.tech/tags/chatgpt4.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [huggingface](<https://devfeed.tech/tags/huggingface.md>), [langchain](<https://devfeed.tech/tags/langchain.md>), [llm](<https://devfeed.tech/tags/llm.md>), [network](<https://devfeed.tech/tags/network.md>), [network-automation](<https://devfeed.tech/tags/network-automation.md>), [ollama](<https://devfeed.tech/tags/ollama.md>), [openai](<https://devfeed.tech/tags/openai.md>), [packet](<https://devfeed.tech/tags/packet.md>), [packet-capture](<https://devfeed.tech/tags/packet-capture.md>), [rag](<https://devfeed.tech/tags/rag.md>), [raptor](<https://devfeed.tech/tags/raptor.md>), [retrieval-augmented-generation](<https://devfeed.tech/tags/retrieval-augmented-generation.md>), [streamlit](<https://devfeed.tech/tags/streamlit.md>), [video](<https://devfeed.tech/tags/video.md>), [wireshark](<https://devfeed.tech/tags/wireshark.md>)

### AI overview

The video describes a development path from retrieval-augmented generation (RAG) to RAG Fusion, which combines RAG with Reciprocal Ranking Fusion, and then to RAPTOR.

### Source excerpt

John Capobianco - Video publication