Recent threats like Sunburst and Hafnium left many organizations scrambling to understand whether they fell victim to these attacks so they could respond appropriately. In this hands-on forensics session, we will analyze both these attacks and demonstrate how - by recording and analyzing packet data - you can be better prepared to quickly investigate and remediate threats like this in the future.