Network Forensics
Medium
Carnage Room: Wireshark Forensics Methodology
A comprehensive methodology for analyzing malicious PCAP files. Covered extracting Cobalt Strike beaconing patterns, Phil Katz ZIP trick, SMTP extraction, and TLS inspection.
#Wireshark#PCAP#Cobalt-Strike#BlueTeam
