Using Wireshark to Gather Forensic Evidence on Malware ...
Using Wireshark to Gather Forensic Evidence on Malware ...
Using Wireshark to Gather Forensic Evidence on Malware ...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Commercial products vs. <str<strong>on</strong>g>Wireshark</str<strong>on</strong>g><br />
• Not a versus<br />
– Have both, use both<br />
– Have <strong>on</strong>ly <strong>on</strong>e of them… ;)<br />
• Best practice:<br />
– SecTools / SecAppliances for au<str<strong>on</strong>g>to</str<strong>on</strong>g>mated m<strong>on</strong>i<str<strong>on</strong>g>to</str<strong>on</strong>g>ring and<br />
pre-analysis<br />
– <str<strong>on</strong>g>Wireshark</str<strong>on</strong>g> for detailed analysis and correlati<strong>on</strong><br />
4