NetsecExplained / Advanced-Wireshark-Network-Forensics

If you've ever picked up a book on Wireshark or network monitoring, they almost all cover about the same information. They'll show you, "Here's an ARP frame, here's an IP packet, here's a web request..." But what they don't go into is: when you open a Pcap file for the first time, where do you start? What are the things that you look for? And ho…
19Updated 5 years ago

Related projects

Alternatives and complementary repositories for Advanced-Wireshark-Network-Forensics