How NIKSUN delivers it
Live capture rolls over as new data arrives. Long-term archival keeps what you must not lose — raw packets and enriched data preserved, untouched, for audit, compliance, and forensics whenever you need to reach back.
Preserved independent of live capture — new data never overwrites your retained record.
Archive raw PCAPs or enriched NKW metadata — from NIKSUN instances or external sources.
A defensible long-term record for retention mandates and back-in-time forensics.
Breaches surface months after the fact. Regulators demand years of records. Investigations reach back further than any live window. Long-term archival makes sure the data is still there.
Meet multi-year retention mandates with a defensible record.
Reconstruct incidents that began long before they were found.
Produce timestamped evidence on demand, years later.
Preserve specific datasets untouched for as long as required.
Because NetBin holds the same raw and enriched data your live platform produces, an investigation can move seamlessly from today's lake to years of archive — no separate tool, no foreign format, no gaps.
See how NIKSUN keeps raw and enriched data for years — ready for audit, compliance, and forensics.
