MATERIAL FROM MY WORKSHOPS AND PRESENTATIONS

• SharkFest 2019 US: analyzing windows malware traffic with Wireshark (links to video and assoicated pcaps)
• Training material for 2019 malware traffic analysis workshop
• Training material for OISF webinar about IcedID activity in 2022
• Training material for 2022 Pcap analysis training
• Training material for 2023 Wireshark workshop

WIRESHARK TUTORIALS I WROTE FOR PALO ALTO NETWORKS

• Wireshark Tutorial: Changing Your Column Display
• Wireshark Tutorial: Display Filter Expressions
• Wireshark Tutorial: Identifying Hosts and Users
• Wireshark Tutorial: Exporting Objects from a Pcap
• Wireshark Tutorial: Decrypting HTTPS traffic
• Wireshark Tutorial: Wireshark Workshop Videos Now Available

TUTORIALS I WROTE FOR PALO ALTO NETWORKS THAT NO LONGER REFLECT THE CURRENT THREAT LANDSCAPE

• Examining Trickbot Infections
• Examining Ursnif Infections
• Examining Qakbot Infections
• Examining Dridex Infection Traffic
• Examining Emotet Infection Traffic
• Examining Traffic from Hancitor Infections

Click here to return to the main page.