Session Data collection

Alert data and session data are two types of NSM data of standard form that is collected over networks. Discuss both forms of data briefly and present a justification for the collection of each. How could each type help you understand whether potential intrusion is taking place?

In Figure identify three locations of strategic interest for collecting session data. Justify your choice. Describe what tools and configuration you will use for collection.