08291499 is referenced by 131 patents and cites 169 patents.

A suspicious activity capture system can comprise a tap configured to copy network data from a communication network, and a controller. The controller is coupled to the tap and is configured to receive the copy of the network data from the tap, analyze the copy of the network data to flag the network data as suspicious, and simulate transmission of the network data to a destination device.

Title
Policy based capture with replay to virtual machine
Application Number
13/423057
Publication Number
8291499 (B2)
Application Date
March 16, 2012
Publication Date
October 16, 2012
Inventor
Muhammad Amin
Fremont
CA, US
Jayaraman Manni
San Jose
CA, US
Ramesh Radhakrishnan
Saratoga
CA, US
Adrian Drzewiecki
Palo Alto
CA, US
Ashar Aziz
Fremont
CA, US
Agent
Carr & Ferrell
Assignee
FireEye
CA, US
IPC
G06F 12/14
G06F 11/30
View Original Source