http://www.lambda.ee/w/index.php?action=history&feed=atom&title=Malware%3AITX8060%3A2013%3ALab2 2026-10-28T14:28:19Z Selle lehekülje redigeerimiste ajalugu MediaWiki 1.43.11 http://www.lambda.ee/w/index.php?title=Malware:ITX8060:2013:Lab2&diff=11072&oldid=prev 2013-11-21T05:06:33Z

<p>Uus lehekülg: &#039;== LAB2 == Download Enisa Pcap - found in Enisa exercise [http://www.tud.ttu.ee/im/Toomas.Lepik/ENISA_CERT_Exercises.ova image] [http://www.enisa.europa.eu/activities/cert...&#039;</p> <p><b>Uus lehekülg</b></p><div>== LAB2 ==<br /> <br /> <br /> Download <br /> <br /> <br /> Enisa Pcap - found in Enisa exercise [http://www.tud.ttu.ee/im/Toomas.Lepik/ENISA_CERT_Exercises.ova image]<br /> <br /> [http://www.enisa.europa.eu/activities/cert/support/exercise/exercise-7 Enisa Network Forensic Exercise pointers]<br /> <br /> Use last number from your student code<br /> <br /> [http://www.tud.ttu.ee/im/Toomas.Lepik/pcap1 Pcap1] EVEN<br /> <br /> [http://www.tud.ttu.ee/im/Toomas.Lepik/pcap2 Pcap2] ODD including 0<br /> <br /> <br /> <br /> <br /> <br /> ===Assignment===<br /> <br /> <br /> understand wich files are downloaded is it a Malware ?<br /> <br /> Where from files are downloaded <br /> <br /> Any C&amp;C or P2P connection data .<br /> <br /> Timeline !<br /> <br /> Snort or Suricata rule do detect.<br /> <br /> How you did your assigment wich tools to whom you consulted and so on .. ?<br /> <br /> <br /> <br /> <br /> ===Additional hints===<br /> <br /> http://www.forensicswiki.org/wiki/Network_forensics<br /> <br /> http://www.forensicswiki.org/wiki/Tools:Network_Forensics</div>

Lepik