How NIKSUN delivers it
With every packet recorded to the NKW, NIKSUN lets you go back in time and reconstruct any incident in seconds — the who, what, where, when and how — and preserve it as evidence.
Replay any moment from full-packet history.
Reconstruct Email, Web, DNS, files, and more.
Preserve complete records for audit & legal.
Find the incident across recorded history.
Rebuild the exact sessions involved.
Trace the full who/what/where/when/how.
Export evidence and open a case.
Because detection, performance, and forensics share one full-packet lake, every alert already has its evidence attached — no separate capture to deploy, no gaps when you need to investigate.
Investigating a remote site with no capture appliance? NetTrident pulls packets back — live, alarm-triggered, or on demand — and TLS decryption decrypts them, TLS 1.3 included, so encrypted sessions reconstruct as readable evidence.
See how NetDetectorLive reconstructs any incident from full-packet history.
