20.02.2014 Views

Using Wireshark to Gather Forensic Evidence on Malware ...

Using Wireshark to Gather Forensic Evidence on Malware ...

Using Wireshark to Gather Forensic Evidence on Malware ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Commercial products vs. <str<strong>on</strong>g>Wireshark</str<strong>on</strong>g><br />

• Not a versus<br />

– Have both, use both<br />

– Have <strong>on</strong>ly <strong>on</strong>e of them… ;)<br />

• Best practice:<br />

– SecTools / SecAppliances for au<str<strong>on</strong>g>to</str<strong>on</strong>g>mated m<strong>on</strong>i<str<strong>on</strong>g>to</str<strong>on</strong>g>ring and<br />

pre-analysis<br />

– <str<strong>on</strong>g>Wireshark</str<strong>on</strong>g> for detailed analysis and correlati<strong>on</strong><br />

4

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!