#networkforensics — Public Fediverse posts

Introduction to Network Threat Detection with @suricata by Lukas Sismis at @openalt in Brno.

Perfect start of the conference day with analysis of #pcap from #anyrun and @malware_traffic

#weekend #education #networkforensics #BlueTeam

Get excited for SharkFest’25 EUROPE in Warsaw, packed with powerful sessions that will sharpen your packet analysis skills!

- From Full Capture to Criminal Evidence - A Real-World Case of Lawful Interception: Join Daniel Spiekermann as he walks through a forensic investigation using nothing but sustained packet captures and Wireshark.

- A Wireshark-driven approach to understanding + troubleshooting MPLS (Pierre Besombes & Juan Pablo Azar Ricciardi): Dive deep into MPLS troubleshooting with Wireshark as your guide. Explore packet structures, label exchanges, and real-world traffic engineering scenarios.

- HTTP deep dive: With HTTP/2 & HTTP/3 now ubiquitous, André Luyer demystifies modern HTTP traffic. Understand nuances like status codes, caching behavior, cookie quirks, compression, & API-troubleshooting.

Don’t miss these sessions and many more when we gather November 3–7, 2025 in Warsaw, Poland.

Secure your spot and explore the full agenda: https://sharkfest.wireshark.org/sfeu

#sf25eu #Wireshark #PacketAnalysis #NetworkForensics #MPLS #HTTP #Cybersecurity

Top 10 #Networking #Tools & Techniques by #ActiveCountermeasures.

I have lot of fun watching this video and there are several useful tips&tricks by Chris and Bill.
Especially recommended to see use cases for #tshark, #tcpdump with #BPF and counting connections per hour from PCAP an #zeek logs

https://www.youtube.com/watch?v=0I6W175cUQk

#networkanalysis #networktraffic #networkforensics

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

#networkmonitoring #networkanalysis #networkforensics #networking

#dfir #knowledgedrop #networkforensics

Came across this gem again: a nice network analysis framework
https://github.com/arkime/arkime

Heading to SharkFest’25 EUROPE in Warsaw? Here are just a few of the session highlights you won’t want to miss:

- From Full Capture to Criminal Evidence: A Real-World Case of Lawful Interception (Daniel Spiekermann)
- Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures (John Capobianco)
- Shift the Conversation: Open Source is Free, But Not Free-Free (Kelley Misata)

Join us this November 3-7 in Poland and learn from some of the best in the field.

Register now: https://sharkfest.wireshark.org/sfeu

#sf25eu #Wireshark #PacketAnalysis #Cybersecurity #OpenSource #NetworkForensics

So there is an NDIS Capture driver in the virtual switches for Hyper-V... guess what you can do with those? :o) #pcap #packetcapture #networkforensics #dfir

I had the pleasure to be at a #NetworkForensics training by @netresec last week.

If you have the opportunity to join a training, just do it!

It has been very intense, in-depth and was a lot of fun. You'll learn a lot and you can even win a t-shirt!

#dfir #forensics #DigitalForensics #infosec

Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics. : https://github.com/mikeroyal/Digital-Forensics-Guide

#digitalforensics #mobileforensics #networkforensics #databaseforensics

I will present our @civilsphere AI VPN this week at the 20th Conference on Detection of Intrusions and Malware & Vulnerability Assessment Arsenal in Hamburg.

The AI VPN is an AI-based traffic analysis tool to detect and block threats, ensuring enhanced privacy protection automatically. It offers modular management of VPN accounts, automated network traffic analysis, and incident reporting. Using the free-software IDS system, Slips, the AI VPN employs machine learning and threat intelligence for comprehensive traffic analysis. Multiple VPN technologies, such as OpenVPN and Wireguard, are supported, and in-line blocking technologies like Pi-hole provide additional protection.

https://dimva2023.de #networkdefense #networkforensics

Unmasking Cyber Threats in India

From tracking hackers to safeguarding sensitive data, network forensics is the frontline defense in the digital battlefield. 🚨

Discover its importance, must-have tools, and real-world applications in our ultimate guide. 🛡️

📖 Read more 👉 https://www.ecsinfotech.com/the-ultimate-guide-to-network-forensics-in-india/

#NetworkForensics #CyberSecurityIndia #DigitalSecurity #CyberCrime #DataProtection #TechIndia #ECSInfotech #CyberAwareness #CyberForensics #ECS

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

#networkmonitoring #networkanalysis #networkforensics #networking

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

#networkmonitoring #networkanalysis #networkforensics #networking

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

#networkmonitoring #networkanalysis #networkforensics #networking

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

#networkmonitoring #networkanalysis #networkforensics #networking

Top 10 #Networking #Tools & Techniques by #ActiveCountermeasures.

I have lot of fun watching this video and there are several useful tips&tricks by Chris and Bill.
Especially recommended to see use cases for #tshark, #tcpdump with #BPF and counting connections per hour from PCAP an #zeek logs

https://www.youtube.com/watch?v=0I6W175cUQk

#networkanalysis #networktraffic #networkforensics

Top 10 #Networking #Tools & Techniques by #ActiveCountermeasures.

I have lot of fun watching this video and there are several useful tips&tricks by Chris and Bill.
Especially recommended to see use cases for #tshark, #tcpdump with #BPF and counting connections per hour from PCAP an #zeek logs

https://www.youtube.com/watch?v=0I6W175cUQk

#networkanalysis #networktraffic #networkforensics

Top 10 #Networking #Tools & Techniques by #ActiveCountermeasures.

I have lot of fun watching this video and there are several useful tips&tricks by Chris and Bill.
Especially recommended to see use cases for #tshark, #tcpdump with #BPF and counting connections per hour from PCAP an #zeek logs

https://www.youtube.com/watch?v=0I6W175cUQk

#networkanalysis #networktraffic #networkforensics

Top 10 #Networking #Tools & Techniques by #ActiveCountermeasures.

I have lot of fun watching this video and there are several useful tips&tricks by Chris and Bill.
Especially recommended to see use cases for #tshark, #tcpdump with #BPF and counting connections per hour from PCAP an #zeek logs

https://www.youtube.com/watch?v=0I6W175cUQk

#networkanalysis #networktraffic #networkforensics

Network Analysis via PowerShell: https://medium.com/@iramjack8/network-analysis-via-powershell-4f1a7460a19b

#networkforensics #WindowsForensics #powershell #digitalforensics

Network Analysis via PowerShell: https://medium.com/@iramjack8/network-analysis-via-powershell-4f1a7460a19b

#networkforensics #WindowsForensics #powershell #digitalforensics