Wireshark Tutorial: Changing Your Column Display
Unit 42 shares a lesson on customizing Wireshark to better meet security researcher needs. The post Wireshark Tutorial: Changing Your Column Display appeared first on Unit 42.
View ArticleIt’s All in the Name: How Unit 42 Defines and Tracks Threat Adversaries
Interested in threat actor nomenclature? The system of naming adversaries starts with monitoring their activity. We offer a broad view of our process. The post It’s All in the Name: How Unit 42 Defines...
View ArticleFinding Gozi: Unit 42 Wireshark Quiz, March 2023
The March installment of our popular Wireshark tutorial series focuses on Gozi malware and identifying its distinct traffic patterns. The post Finding Gozi: Unit 42 Wireshark Quiz, March 2023 appeared...
View ArticleWireshark Tutorial: Exporting Objects From a Pcap
This Wireshark tutorial guides the reader in exporting different packet capture objects. It builds on a foundation of malware traffic analysis skills. The post Wireshark Tutorial: Exporting Objects...
View ArticleWireshark Tutorial: Identifying Hosts and Users
When a host is infected or otherwise compromised, security professionals need to quickly review packet captures of suspicious network traffic to identify affected hosts and users. This tutorial offers...
View Articledotnetfile Open Source Python Library: Parsing .NET PE Files Has Never Been...
The dotnetfile library extracts useful information from .NET PE files and can overcome common techniques malware authors use to break parsing. The post dotnetfile Open Source Python Library: Parsing...
View ArticleCobalt Strike Analysis and Tutorial: CS Metadata Encryption and Decryption
We show how metadata encryption and decryption contributes to making Cobalt Strike an effective emulator that is difficult to defend against. The post Cobalt Strike Analysis and Tutorial: CS Metadata...
View ArticleIt’s All in the Name: How Unit 42 Defines and Tracks Threat Adversaries
Interested in threat actor nomenclature? The system of naming adversaries starts with monitoring their activity. We offer a broad view of our process. The post It’s All in the Name: How Unit 42 Defines...
View ArticleCobalt Strike Analysis and Tutorial: Identifying Beacon Team Servers in the Wild
We present new techniques that leverage active probing and network fingerprint technology to help you detect Cobalt Strike’s Team Servers. The post Cobalt Strike Analysis and Tutorial: Identifying...
View ArticleWireshark Tutorial: Exporting Objects From a Pcap
This Wireshark tutorial guides the reader in exporting different packet capture objects. It builds on a foundation of malware traffic analysis skills. The post Wireshark Tutorial: Exporting Objects...
View ArticleWireshark Tutorial: Identifying Hosts and Users
When a host is infected or otherwise compromised, security professionals need to quickly review packet captures of suspicious network traffic to identify affected hosts and users. This tutorial offers...
View ArticleWireshark Tutorial: Display Filter Expressions
This is a tutorial about using Wireshark, a follow-up to "Customizing Wireshark – Changing Your Column Display." It offers guidelines for using Wireshark filters to review and better understand pcaps...
View ArticleRedLine Stealer: Answers to Unit 42 Wireshark Quiz
Part two of our RedLine Stealer Wireshark quiz walks analysts through understanding a malware infection, from interpreting malicious traffic to identifying targeted data. The post RedLine Stealer:...
View ArticleWireshark Tutorial: Changing Your Column Display
Unit 42 shares a lesson on customizing Wireshark to better meet security researcher needs. The post Wireshark Tutorial: Changing Your Column Display appeared first on Unit 42.
View ArticleCrossing the Line: Unit 42 Wireshark Quiz for RedLine Stealer
RedLine stealer harvests credentials and other data from a Windows host. Part one of this Wireshark tutorial analyzes RedLine traffic to determine what data was stolen. The post Crossing the Line: Unit...
View ArticleCold as Ice: Answers to Unit 42 Wireshark Quiz for IcedID
This is the follow-up post to our Wireshark quiz on an IcedID infection. We provide the answers on the traffic, victim and more in this full pcap analysis. The post Cold as Ice: Answers to Unit 42...
View ArticleCold as Ice: Unit 42 Wireshark Quiz for IcedID
IcedID is a known vector for ransomware. Analyze infection traffic from this banking trojan in our latest Wireshark tutorial. The post Cold as Ice: Unit 42 Wireshark Quiz for IcedID appeared first on...
View ArticleFinding Gozi: Answers to Unit 42 Wireshark Quiz, March 2023
Our follow-up March Wireshark quiz details the Gozi variant traffic analysis. Review and then compare your answers. The post Finding Gozi: Answers to Unit 42 Wireshark Quiz, March 2023 appeared first...
View ArticleFinding Gozi: Unit 42 Wireshark Quiz, March 2023
The March installment of our popular Wireshark tutorial series focuses on Gozi malware and identifying its distinct traffic patterns. The post Finding Gozi: Unit 42 Wireshark Quiz, March 2023 appeared...
View ArticleAnswers to Unit 42 Wireshark Quiz, February 2023
The answers post to February 2023's Wireshark quiz critiques a written incident report after reviewing real-world traffic from a live setting. The post Answers to Unit 42 Wireshark Quiz, February 2023...
View Article
![[TVRIP] FX Senshi Kurumi-chan [FX戦士くるみちゃん] 第01-02話](http://animerss.com/img/TVRIP-FX-Senshi-Kurumi-chan.jpg)
