Wireshark Analysis Basics | Detecting NMAP Scans and ARP Attacks
If you enjoy my TryHackMe videos and are interested in signing up for a subscription, use my affiliate link, I highly appreciate it!
https://tryhackme.com/signup?referrer...
Today we're doing TryHackMe's latest room, Wireshark: Traffic Analysis! We're going to be looking at the techniques and key points of traffic analysis with Wireshark and how to detect suspicious activities. Today's tasks are going to be strictly focused on detecting NMAP scans (TCP connect scans, SYN scans, and UDP scans) and ARP Poisoning/Spoofing (aka Man In The Middle Attacks).
TryHackMe Wireshark: Traffic Analysis Room: https://tryhackme.com/room/wiresharkt...
Music provided by: https://mccoybeats.com/
00:00 - TryHackMe Wireshark: Traffic Analysis Intro
04:38 - Using Wireshark To Detect NMAP Scans
15:22 - Wireshark NMAP Detection Lab
26:00 - Using Wireshark To Detect Arp Poisoning/Spoofing
38:55 - Wireshark ARP Poisoning Lab
#tryhackme #blueteam #redteam
*Below you'll find what are known as affiliate links. These are links to things that I actually use and recommend. If you buy them, I will receive a super small kickback that helps support this channel and the giveaways I do on social media. Thanks!!*
(YouTube Gear, IT Devices, Books, Pre-workout I use...STUFF I 100% RECOMMEND)
The most comprehensive course I've found on learning about encryption and TLS. It really is a combination of topics from multiple classes I've taken. Here is a link for it with a $100 off:
https://classes.pracnet.net/courses/p... (Affiliate Link)
A great resource I've used to learn about AWS networking is the AWS Networking Fundamentals book: https://amzn.to/3voSe7z (Affiliate Code)
I've also recently started using the AWS Security Cookbook: https://amzn.to/3KSSJN4 (Affiliate Code) and AWS Advanced Networking book: https://amzn.to/3KSGU9x (Affiliate Code). Both breakdown topics very well and have some great labs(a bit more advanced then what is needed for the SOA exam).
Here is the Comptia Pentest+ training book bundle I used to pass the new PenTest+.
(Affiliate Link) - https://amzn.to/3A9X8Hx
Network+ Study Guide that I co-authored: (Affiliate Link) -https://amzn.to/2vTODU2
Amazon Affiliate Store: https://www.amazon.com/shop/jbizzle703
----------------------------------------------------------------------------------------------------------------------------------------
Subscribe to our monthly newsletter and blog notifications
https://mailchi.mp/e7b56addb7fc/cyber...
C-----Y-----B-----E-----R-----I-----N-----S-----I-----G-----H-----T
J.B.C.'s Site ️https://www.jbcsec.com/insights
Swag Store ️ https://www.teepublic.com/user/jbc
Twitter ️ / jbc_sec
Author ️ / jbizzle703
----------------------------------------------------------------------------------------------------------------------------------------