Advanced Wireshark Network Forensics – Part 2/3
Powered by iSpeech
So, in this Scenario, we are being told there is a system on the network infested with malware. For some reason the Anti-Virus on the computer didn't detect it and the malware has managed to lock up the system. We don't have access to the hard drive, but we do have a full network packet capture of the incident. And, we already know the IP of the infected host, which will give us a good starting point.
Scenario pcaps:
https://github.com/NetsecExplained/Advanced-Wireshark-Network-Forensics
video, sharing, camera phone, video phone, free, upload
2018-12-05 06:36:28
source
Gloss