How to Leverage PowerShell to Create a User- Friendly Version of WinDump

WinDump is often used to analyze packet captures by incorporating Berkeley Packet Filters, to reduce large captures into manageable subsets. The filtering makes use of macros to easily specify common protocol properties, however, analyzing other properties requires a deeper understanding of the...

By

Robert Adams

January 18, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - HUMINT and its Role within Cybersecurity_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

October 4, 2024

HUMINT and its Role within Cybersecurity

This blog explores HUMINT's role in cybersecurity, detailing its implementation, benefits, and potential risks.

370x370 Jon DiMaggio.png

Digital Forensics, Incident Response & Threat Hunting

January 16, 2024

FOR528: Ransomware & Cyber Extortion Course Updates Implemented – What’s New?

The recent FOR528 course better addresses the differences between ransomware and cyber extortion, and provides new hands-on labs and bonus content.

Blog_teaser_images_(19).png

Digital Forensics, Incident Response & Threat Hunting, Open-Source Intelligence (OSINT)

August 31, 2023

FOR589: Cybercrime Intelligence - NEW SANS DFIR Course coming soon

Learn to traverse the cyber underground, social engineer cybercriminals and investigate illicit cryptocurrency activity.

Sean O'Connor