domains / families / security / traffic-analysis-pcap

traffic-analysis-pcap

separate

Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line analysis.

When to use

• PCAP repair
• Wireshark filters
• protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi)
• data extraction
• covert channel detection
• TLS decryption
• tshark command-line analysis

Skill page

Source