Arutelu:Malware:ITX8060:2013:Lab2: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
Uus lehekülg: '== LAB1 == Download Enisa Pcap - found in Enisa exercise [http://www.tud.ttu.ee/im/Toomas.Lepik/ENISA_CERT_Exercises.ova image] [http://www.enisa.europa.eu/activities/cert...' |
Resümee puudub |
||
| 22. rida: | 22. rida: | ||
Malware | understand wich files are downloaded is it a Malware ? | ||
Where from | Where from files are downloaded | ||
Any C&C or P2P connection data . | Any C&C or P2P connection data . | ||
Redaktsioon: 21. november 2013, kell 07:05
LAB1
Download
Enisa Pcap - found in Enisa exercise image
Enisa Network Forensic Exercise pointers
Use last number from your student code
Pcap1 EVEN
Pcap2 ODD including 0
Assignment
understand wich files are downloaded is it a Malware ?
Where from files are downloaded
Any C&C or P2P connection data .
Timeline !
Snort or Suricata rule do detect.
How you did your assigment wich tools to whom you consulted and so on .. ?