Loading

随笔分类 -  流量分析

2. 20141123
摘要：BASIC QUESTIONS: What is the IP address of the Windows VM that gets infected? 将所有的http 对象导出来，再用杀毒软件查杀。 根据文件名定位到数据包 所以就是 172.16.165.132 What is the MAC 阅读全文
posted @ 2022-01-18 10:32 沉云 阅读(55) 评论(0) 推荐(0)
1. 20141116
摘要：Malware-Traffic-Analysis.net - 2014-11-16 - Traffic analysis exercise CyberDefenders – MyDFIR 并不是解题的思路历程，而是答案证据记录。 LEVEL 1 QUESTIONS: What is the IP a 阅读全文
posted @ 2022-01-17 10:49 沉云 阅读(95) 评论(0) 推荐(0)