Users at a university are experiencing slow response and performance issues with private cloud services. The university was compromised, and a loss of bandwidth utilization was reported. Without deplo

Sending logs to a SIEM provides historical and aggregated data but might not offer the real-time, granular network traffic visibility needed to diagnose 'loss of bandwidth utilization' effectively without specific network flow logs or deep packet inspection.

Replacing load balancers with content delivery networks (CDNs) is a solution for content delivery optimization, not a diagnostic step for slow response, bandwidth loss, or compromise, and involves deploying new infrastructure/software.

Installing sniffing tools, cataloging traffic, and capturing all traffic to and from target systems allows for deep packet inspection and analysis of network activity. This directly addresses the reported loss of bandwidth utilization and potential compromise by identifying unusual traffic patterns, malicious activity, or misconfigurations that consume bandwidth and cause performance issues, all without deploying new software.

Implementing and updating an antivirus solution typically involves deploying new software, and while it's a security measure, it's focused on detecting known threats, not necessarily diagnosing unknown bandwidth loss or performance issues from a compromised system's network activity.