> For the complete documentation index, see [llms.txt](https://docs.elastiflow.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.elastiflow.com/data_platforms/elastic/ml/netsec/netsec_activity.md).

# Network Activity

In the realm of network security, the rapid identification of suspicious and malicious network activity is paramount. With the increasing sophistication of cyber threats, organizations face a constant challenge in protecting their networks from a variety of attacks that can compromise data integrity, privacy, and operational continuity. Early detection of such network activities is crucial, as it enables timely interventions to mitigate risks and prevent potential breaches. In this context, a collection of anomaly detection jobs is instrumental in providing an advanced layer of security by actively monitoring and analyzing network traffic and behaviors to identify potential threats.

ElastiFlow provides a collection of anomaly detection jobs specifically designed to pinpoint various forms of suspicious and malicious network activities, employing sophisticated algorithms and pattern recognition techniques.

#### Downloads

| Schema    | Link                                                                                                                                                                 |
| --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **CODEX** | [All Network Activity ML Jobs for CODEX Schema](https://github.com/elastiflow/elastiflow_for_elasticsearch/raw/master/ml/codex/netsec_activity/netsec_activity.json) |
| **ECS**   | [All Network Activity ML Jobs for ECS Schema](https://github.com/elastiflow/elastiflow_for_elasticsearch/raw/master/ml/ecs/netsec_activity/netsec_activity.json)     |

By integrating this suite of anomaly detection jobs, organizations can significantly enhance their capability to swiftly detect and respond to sophisticated and evolving network threats. These tools not only help in identifying known malicious network activities but are also crucial in uncovering new, previously unknown threats, thereby fortifying the network's defense against a broad spectrum of cyber risks. This proactive approach is essential for maintaining a secure, resilient, and trustworthy network environment in today's digital landscape.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.elastiflow.com/data_platforms/elastic/ml/netsec/netsec_activity.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.