|
|
| (ei näidata sama kasutaja üht vahepealset redaktsiooni) |
| 1. rida: |
1. rida: |
| == LAB1 ==
| |
|
| |
|
| |
| Download
| |
|
| |
|
| |
| Enisa Pcap - found in Enisa exercise [http://www.tud.ttu.ee/im/Toomas.Lepik/ENISA_CERT_Exercises.ova image]
| |
|
| |
| [http://www.enisa.europa.eu/activities/cert/support/exercise/exercise-7 Enisa Network Forensic Exercise pointers]
| |
|
| |
| Use last number from your student code
| |
|
| |
| [http://www.tud.ttu.ee/im/Toomas.Lepik/pcap1 Pcap1] EVEN
| |
|
| |
| [http://www.tud.ttu.ee/im/Toomas.Lepik/pcap2 Pcap2] ODD including 0
| |
|
| |
|
| |
|
| |
|
| |
|
| |
| ===Assignment===
| |
|
| |
|
| |
| understand wich files are downloaded is it a Malware ?
| |
|
| |
| Where from files are downloaded
| |
|
| |
| Any C&C or P2P connection data .
| |
|
| |
| Timeline !
| |
|
| |
| Snort or Suricata rule do detect.
| |
|
| |
| How you did your assigment wich tools to whom you consulted and so on .. ?
| |
|
| |
|
| |
|
| |
|
|
| |
|
Viimane redaktsioon: 21. november 2013, kell 07:06