Patent ID: 11936539
Assignee: CAPITAL ONE SERVICES, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 7:
8. A system comprising one or more processors and a memory configured to perform the steps of:
storing a first network packet capture file in a primary storage, wherein a retention policy specifies an amount of time that traffic captured by a packet capture management system should be stored and includes a time-to-live (TTL) of the first network packet capture file;
receiving an instruction, from a first network monitoring device that monitors or analyzes the traffic, identifying the first network packet capture file as being of interest to a network administrator;
in response to the instruction, moving the first network packet capture file from the primary storage to a secondary storage;
in response to the moving, changing the TTL to specify that the first network packet capture file remains in the secondary storage after the first network packet capture file is scheduled for deletion in the primary storage; and
sending an instruction to a second network monitoring device to set a TTL of a decryption key stored in a secure keystore, wherein the setting of the TTL of the decryption key is based on the retention policy corresponding to network packets associated with the decryption key.