- Log in to LogRhythm NDR's new UI.
- Click Hunt from the sidebar menu and then click Incidents.
The Incidents page appears.
- Click on any Incident against a particular incident category.
A table appears displaying all the individual incidents under a particular category.
- Click a particular Incident.
A pop-up appears displaying a short summary, details, and recommendations.
- Click the three-dot menu button at the bottom of the pop-up.
The More Details... page appears.
- Click the PCAP Download button available in the Info column for each subentry to download the PCAP file.
If the PCAP file download is successful, the “PCAP file downloaded successfully” message appears.