Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including