EndaceVision is the Web UI component of the EndaceProbe and provides analysts with the ability to visualise, filter and analyse network traffic from any number of EndaceProbes. EndaceVision is included within the price of the Probes and management platforms and is designed for scalability and speed, so that an analyst can work fast to identify the traffic relevant to a threat. EndaceVision integrates easily with other tools, such as SIEMs, so that when an event occurs an analyst can immediately “pivot” to a view of the relevant traffic within Vision. Then they are able to move forwards and backwards in time, to see what happened before the event, such as reconnaissance, and what happened afterwards, such as exfiltration of data. Filters can also be changed so that they can see lateral movement of an attacker within the network, quickly building a solid understanding of the entire breach.