Wireshark Analysis Basics | Detecting Hosts, FTP, & DNS and ICMP Tunneling
If you enjoy my TryHackMe videos and are interested in signing up for a subscription, use my affiliate link, I highly appreciate it!
https://tryhackme.com/signup?referrer...
Today we're doing TryHackMe's latest room, Wireshark: Traffic Analysis! We're going to be looking at the techniques and key points of traffic analysis with Wireshark and how to detect suspicious activities. Today's tasks are going to be strictly focused on detecting hosts via Kerberos, Netbios, and DHCP; identifying tunneled traffic in DNS and ICMP communication; and analyzing FTP.
TryHackMe Wireshark: Traffic Analysis Room: https://tryhackme.com/room/wiresharkt...
Wireshark cheat sheet:
https://cdn.comparitech.com/wp-conten...
00:00 - Wireshark Traffic Analysis Intro
02:09 - Identifying Hosts with Wireshark and DHCP Analysis
07:07 - Identifying Hosts with Wireshark and NetBIOS Analysis
07:55 - Identifying Hosts with Wireshark and Kerberos Analysis
09:39 - Identifying Hosts with Wireshark Lab
31:00 - Identifying Traffic Tunneled in ICMP with Wireshark
35:09 - Identifying Traffic Tunneled in DNS with Wireshark
39:13 - Identifying Tunneled Traffic with Wireshark Lab
48:08 - Analyzing Cleartext FTP with Wireshark
52:48 - Analyzing Cleartext FTP with Wireshark Lab
Music provided by: https://mccoybeats.com/
#tryhackme #blueteam #redteam
*Below you'll find what are known as affiliate links. These are links to things that I actually use and recommend. If you buy them, I will receive a super small kickback that helps support this channel and the giveaways I do on social media. Thanks!!*
(YouTube Gear, IT Devices, Books, Pre-workout I use...STUFF I 100% RECOMMEND)
The most comprehensive course I've found on learning about encryption and TLS. It really is a combination of topics from multiple classes I've taken. Here is a link for it with a $100 off:
https://classes.pracnet.net/courses/p... (Affiliate Link)
A great resource I've used to learn about AWS networking is the AWS Networking Fundamentals book: https://amzn.to/3voSe7z (Affiliate Code)
I've also recently started using the AWS Security Cookbook: https://amzn.to/3KSSJN4 (Affiliate Code) and AWS Advanced Networking book: https://amzn.to/3KSGU9x (Affiliate Code). Both breakdown topics very well and have some great labs(a bit more advanced then what is needed for the SOA exam).
Here is the Comptia Pentest+ training book bundle I used to pass the new PenTest+.
(Affiliate Link) - https://amzn.to/3A9X8Hx
Network+ Study Guide that I co-authored: (Affiliate Link) -https://amzn.to/2vTODU2
Amazon Affiliate Store: https://www.amazon.com/shop/jbizzle703
----------------------------------------------------------------------------------------------------------------------------------------
Subscribe to our monthly newsletter and blog notifications
https://mailchi.mp/e7b56addb7fc/cyber...
C-----Y-----B-----E-----R-----I-----N-----S-----I-----G-----H-----T
J.B.C.'s Site ️https://www.jbcsec.com/insights
Swag Store ️ https://www.teepublic.com/user/jbc
Twitter ️ / jbc_sec
Author ️ / jbizzle703
----------------------------------------------------------------------------------------------------------------------------------------