Unit 42 Wireshark Quiz, February 2023
Summary: Unit 42 published a February 2023 Wireshark quiz built on a packet capture of infection activity from an Active Directory environment, containing real-world traffic from a simulated enterprise setting. Participants review the pcap and write an incident report with an executive summary, victim details, and indicators of compromise, with answers scheduled for a separate post on Monday, Feb. 27.
What you should know: The exercise asks investigators to pin down the victim and the time of infection from traffic alone, and Unit 42 warns that analyzing malicious traffic on a Windows machine carries a risk of infection, recommending BSD, Linux, or macOS instead.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026