Last year I gave an introduction on what exactly flow data is, what it looks like, and a basic rundown on how to get started with it. Since then I've received a lot of requests that I expand on the questions of "how to get started" as well as "and then what"? This year I'll be giving a very brief recap on what flows are and why you should collect them, and I'll be spending most of my time on the question of how to set up free tools to provide enterprise flow monitoring for security and situational awareness. I'll also be spending significant time answering "and then what?" with real-world practical examples that I've prepared as well as live examples from questions in the audience.