Arutelu:Malware:ITX8060:2013:Lab2: erinevus redaktsioonide vahel

Viimane redaktsioon: 21. november 2013, kell 07:06

@@ 1. rida: / 1. rida: @@
-== LAB1 ==
-Download
-Enisa Pcap - found in Enisa exercise [http://www.tud.ttu.ee/im/Toomas.Lepik/ENISA_CERT_Exercises.ova image]
-[http://www.enisa.europa.eu/activities/cert/support/exercise/exercise-7 Enisa Network Forensic Exercise pointers]
-Use last number from your student code
-[http://www.tud.ttu.ee/im/Toomas.Lepik/pcap1 Pcap1]  EVEN
-[http://www.tud.ttu.ee/im/Toomas.Lepik/pcap2  Pcap2]  ODD including 0
-===Assignment===
-Malware what is downloaded
-Where from is downloaded
-Any C&C or P2P connection data .
-Timeline !
-Snort or Suricata rule do detect.
-How you did your assigment wich tools to whom you consulted and so on ..  ?