Tag Info

New answers tagged

2

You can use Wireshark to extract conversation statistics from the packet captures. This information can then be sorted through to determine which ports are used regularly: This screen is from the Wireshark Statistics->Conversations menu items. It also has a "Copy" button which will allow you to get this data as CSV; you could then extract destination ...


1

I don't know if i understand your question well enough, but to me this sounds like all you really want is to open the pcapng-file(s) in Wireshark. Maybe my answer is totally off the track. If this is the case, please specify your question further.


0

is there an option where I can still turn on Windows Auditing and filter for these activities? [YES] I think you should use Log Parser 2.2 a tool from Microsoft and as its description say Log parser is a powerful, versatile tool that provides universal query access to text-based data such as log files, XML files and CSV files, as well as key data ...


3

Your question here is basically the question every steganalysts are asking. Reading from wikipedia page: The goal of steganalysis is to identify suspected packages, determine whether or not they have a payload encoded into them, and, if possible, recover that payload. The usual way to go is to have a set of known not-steganographed data to extrapolate ...


-1

In case of hidden partitions, copy the materials to a different media. Don't clone it though. Also don't allow compressed or encrypted attachments. One of my clients doesn't allow compressed files beyond 99% compression for instance. In the case of images, you can resize an image by reduction, which will typically remove any altered binary info in the ...



Top 50 recent answers are included