The monitor doesn’t just evaluate packet composition. It might look at TLS certificates and focus on HTTP requests and DNS calls. A file extraction facility helps you to take a look at and isolate suspicious information with virus an infection features. This known as a LAPI.