2018-10-31 - TRAFFIC ANALYSIS EXERCISE - HAPPY HALLOWEEN!

ASSOCIATED FILES:

• Zip archive of the pcaps:  2018-10-31-traffic-analysis-exercise.pcap.zip   4.6 MB (4,571,827 bytes)

NOTES:

• All zip archives on this site are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

SCENARIO

Review the pcap and draft an incident report.  Your report should contain:

• Date and time of the activity (in GMT or UTC)
• The account name or username from the infected Windows computer
• The host name of the infected Windows computer
• The MAC address of the infected Windows computer
• SHA256 file hashes for any malware from the pcap
• What type of infection this is

 

ANSWERS

• Click here for the answers.

 

Click here to return to the main page.