전체 글

DevOps Security Specialist를 목표하는 Security Compliance Engineer의 블로그
old/Network

[자료] TCP dump

https://danielmiessler.com/study/tcpdump/ A tcpdump Tutorial and Primer with ExamplesCREATED: JANUARY 4, 2004 | UPDATED: JULY 15, 2018Basic Examplesbasic communicationfind traffic by ipfilter by source and/or destinationshow traffic by networkshow traffic by portshow traffic by protocolshow ipv6 trafficfind traffic using port rangesfind traffic based on packet sizewriting to a fileAdvanced Examp..

old/Forensic

[자료] Live Response: Collecting Volatile Data

http://what-when-how.com/windows-forensic-analysis/live-response-collecting-volatile-data-windows-forensic-analysis-part-1/

old/Network

[자료] Capture a Network Trace without installing anything

https://blogs.msdn.microsoft.com/canberrapfe/2012/03/30/capture-a-network-trace-without-installing-anything-capture-a-network-trace-of-a-reboot/ If you need to capture a network trace of a client or server without installing Wireshark or Netmon this might be helpful for you. (This feature works on Windows 7/2008 R2 and above).The short version:1. Open an elevated command prompt and run: "netsh t..

MR. ZERO
Security & DevOps