Faddom uses network traffic to collect data on your environment. Most of the stored data only contains information about the data flows themselves and not any application data.
We keep various data fields for the different entities in our system.
Connections:
IP Addresses
Ports
Number of packets/bytes
DNS names
MAC addresses
In addition, when getting the full network traffic and not just Netflow, the following are also collected and stored:
SSL Certificate details (serial number, expiration date, common name)
Database schema names
URLs for unencrypted HTTP traffic
Integrations with other tools, Faddom also collects details on the server including:
CPU
Memory
Storage
CPU/Memory usage
VM Names
Load balancer configurations
Credentials:
Encrypted and stored in the customer's database