← incident responder
Take Quiz →
Network Forensics — PCAP Analysis, Protocol Dissection, and C2 Extraction
intermediate 4h
Analyze full packet captures with Wireshark and tshark, extract C2 communications, recover transferred files, and reconstruct attack timelines from network evidence.
Lessons
1 Wireshark and tshark — PCAP Analysis Fundamentals
25 min 2 C2 Extraction and Protocol Analysis — Identifying Attack Traffic in PCAP
25 min 3 File Carving, Timeline Reconstruction, and PCAP Evidence Standards
20 min Module Quiz
Test your knowledge before moving on.