cybersecurity / soc analyst

    Network Forensic Analysis (PCAP)

    Module Progress
    4 / 10

    Initialize Transmission

    4K Cinematic Stream Ready

    Mission Intelligence

    Reconstruct exfiltration from raw packet data using TShark.

    Operational Objectives

    • 01Extract HTTP files from PCAP.
    • 02Find DNS tunneling signatures.
    • 03Follow TCP stream of reverse shell.
    • 04Filter for 'http.request.method == POST'.
    • 05Identify suspicious beacons.
    Secure Workstation Instance
    SYSTEM BOOT: SUCCESSFUL
    ENCRYPTION: AES-256-GCM ACTIVE
    USER: root@iset-sandbox
    Welcome to the iSET+ interactive terminal.
    Type 'help' to see available commands.
    ➜~
    ➜~