IDS Isn't What It Used to Be, but It's a Scale Problem

Most of what we are watching is North South traffic. But because you have different organizations in the way that network was structured, you do pick up some East West traffic. We could actually see the SMB traffic and using open source tools,. Even like Sir Kata, would allow us to decode that SMB traffic  and then figure out what file was being transferred.