Interflow was designed by Stellar Cyber engineers with the goal to capture network packets, security tools’ logs and application data in an effort to output a dataset that is richer than Netflow (too light), significantly lighter weight than PCAP (too heavy) and fused with rich context (just right) such as host name, user information, Threat Intelligence, geolocation, etc.

Interflow starts at ingestion of security infrastructure data through the broadest suite of sensors, collectors and forwarders to literally collect all data from anything, or anywhere data and applications reside–on the network, servers, containers, physical end points and virtual hosts, on premises, in public clouds and with service providers.

Interflow normalizes collected data, fuses the additional context into it and shares them among highly integrated applications as well as third-party applications, driving single-pane-of-glass visibility and control across the entire IT infrastructure. The right data with context enables better detection and easy-to-understand results for security teams.

Stellar Cyber is the only intelligent next gen security operations platform powered by open eXtended Detection and Response (Open XDR) that provides high-speed high-fidelity threat detection across the entire attack surface because of Interflow.

Stellar Cyber processes the right data creating an actionable, searchable and exportable record — called Interflow. Interflow normalizes security data shared between integrated applications and third-party tools.