Hillstone sBDS provides visibility into ongoing indicators of compromise (IoCs) across a wide range of threat types. In addition, sBDS provides server traffic monitoring and mapping of traffic patterns so that threat sources, or other downstream compromised systems can be easily cataloged. Built-in forensic capabilities facilitates system learning to identify the key vectors of compromise and block those in the future