Wireshark investigation: Network Traffic Analysis

In this fictional investigation, we be acting as a SOC engineer for mock company called X-CORP, supporting the SOC infrastructure. During this investigation we will be going through several mini investigations Time Thieves, Vulnerable Windows Machine, Illegal Downloads. I encourage you to follow along and or investigate your self. By filling out this document as you progress through the investigation:

Background:

the SOC engineer at X-CORP have noticed some discrepancies with alerting in the Splunk …

cybersecurity networking wireshark