Jan 1 · 3 min read · For Day 22 of the Advent of Cyber, I completed the "Command & Carol" mission, which focused on Command and Control (C2) detection. This challenge introduced a specialized tool called Rita (Real Intelligence Threat Analytics) to hunt for malicious bea...
Join discussion
Oct 12, 2025 · 4 min read · الـسـلام عـلـيكـم ورحـمـة الله وبـركاته Last time, we talked about Network Forensics and mentioned briefly some of the main tools we use. In this article, I’ll give a simple explanation of each tool along with learning resources, so we can understand...
Join discussion
Oct 11, 2025 · 6 min read · الـسـلام عـلـيكـم ورحـمـة الله وبـركاته 🕵️♀️ Today, we’ll talk about Network Forensics Network Forensics is a branch of digital forensics that focuses on analyzing network traffic to investigate and reconstruct cyber incidents.In simple words, it h...
Join discussion
Sep 15, 2025 · 2 min read · Questions: What is the IP responsible for conducting the port scan activity? For this, we can use the command tcp.flags.syn ==1 and tcp.flags.ack == 0 on our Wireshark search filter to figure out the answer. This is to give us results only with the...
Join discussion
Sep 8, 2025 · 2 min read · Questions: The attacker successfully executed a command to download the first stage of the malware. What is the URL from which the first malware stage was installed? Filter according to http on your search bar. Then go to Packet No. 7 and follow H...
Join discussion
Jul 17, 2025 · 4 min read · The global network forensics market was valued at USD 2.20 billion in 2023 and is forecasted to reach USD 6.23 billion by 2030, growing at a compound annual growth rate (CAGR) of 17.2% from 2024 to 2030. This significant growth is largely driven by t...
Join discussionJun 21, 2025 · 2 min read · Scenario: The SOC team has detected suspicious activity in the network traffic, revealing that a machine has been compromised. Sensitive company information has been stolen. Your task is to use Network Capture (PCAP) files and Threat Intelligence to ...
Join discussion
Apr 28, 2025 · 4 min read · 🔗 Link del Laboratorio: https://cyberdefenders.org/blueteam-ctf-challenges/retailbreach/ 🧰 Herramienta utilizada: Wireshark Escenario En los últimos días, ShopSphere, una destacada plataforma de venta minorista en línea, ha experimentado una activ...
Join discussionApr 27, 2025 · 5 min read · 🔗 Link del laboratorio: https://cyberdefenders.org/blueteam-ctf-challenges/jetbrains/ 🧰 Herramienta utilizada: Wireshark Escenario Durante un reciente incidente de seguridad, un atacante explotó con éxito una vulnerabilidad en nuestro servidor web...
Join discussion