SOC Case Study #1: Investigating a NetSupport RAT Infection Using Wireshark

1. Introduction Every day, SOC analysts receive hundreds of alerts from their SIEM platform. Most turn out to be false positives, but occasionally an alert points to a genuine compromise. In this case