Network Security Audit and Digital Forensics Design Guide › Chapter 9
Calculator
Five interactive calculators for sizing, capacity planning, and cost estimation of your network security audit and digital forensics platform. All calculations update in real time.
EPS Capacity Calculator
Estimate the required Events Per Second (EPS) ingestion capacity for your SIEM and log collection infrastructure based on your endpoint count, log source mix, and incident peak multiplier.
⚡ EPS Capacity Results
Baseline EPS
—
events/sec
Peak EPS
—
events/sec
Recommended Collector Nodes
—
nodes (N+1)
SIEM Index Nodes
—
nodes (HA)
Baseline Load0%
Log Storage Capacity Calculator
Calculate hot index (searchable) and cold archive (WORM) storage requirements based on your EPS, average log size, retention periods, and compression ratio.
💾 Storage Capacity Results
Raw Daily Volume
—
GB/day
Hot Index Storage
—
TB
Cold Archive Storage
—
TB
Total with Replication
—
TB
PCAP Storage Calculator
Size your full packet capture storage based on monitored bandwidth, capture efficiency, retention period, and the number of capture points in your network.
📡 PCAP Storage Results
Raw Capture Rate
—
GB/hour
Daily PCAP Volume
—
TB/day
Total PCAP Storage
—
TB
Recommended Sensor Spec
—
Storage Utilization Forecast (90 days)—
Evidence Retention Cost Estimator
Estimate the total cost of evidence storage over the retention lifecycle, comparing on-premises WORM storage versus cloud object storage (S3-compatible) options.
Hot + cold combined
Including power, cooling, maintenance
S3 Glacier Deep Archive ~$1.2/TB/mo; Glacier ~$4/TB/mo; Standard ~$23/TB/mo
For evidence retrieval/export
💳 7-Year Total Cost of Ownership
On-Prem Total Cost
—
USD
Cloud Total Cost
—
USD
Cost Difference
—
USD
Recommended Option
—
Cumulative Cost Comparison (Year 1 → Year N)
Deployment Scale Assessment
Assess your overall deployment scale and get a recommended architecture tier, component count, and implementation roadmap based on your organization profile.