Try Hack Me – Advent of Cyber 3 – Day 8 – Windows Logs, Powershell, and Directories

Packet analysis is a technique used to capture and intercept network traffic that passes the computer’s network interfaces. Packet analysis may also be called with different terms such as packet sniffer, packet analyzer, protocol analyzer, or network analyzer. As a cybersecurity individual, gaining packet analysis skills is an important requirement for network troubleshooting and communication protocol analysis. Using network analysis tools such as Wireshark, it captures network packets in real-time and displays them in a human-readable format. It provides many advanced features, including the live capture and offline analysis. This task covers the packet analysis steps in detail using Wireshark to analyze various protocols (unencrypted protocols) such as HTTP, DNS, and FTP.

A few Wireshark filters:

This lab was pretty much spoon-fed. I did some work with Wireshark for a separate project, so this made the entire lab straight forward. Good revision though.