SSL handshake- when symmetric keys are given out after the FIN packet to establish encrypted communication traffic and give each party the possibility to decrypt the traffic utilyzing a shared symmetric key. SIEM tools- Security Information and Event Management tools such as splunk. They are used to manage systems by logging and analyzing alerts.