Wireshark

PCAP Analysis with Wireshark and Tshark | Digital Forensics and Incident Response
Introduction PCAPs can greatly aid an investigation after an incident has occurred. However, PCAPs contain massive amounts of data that is difficult to parse and time is valuable, especially during live investigations.
Pranshu Bajpai
Last updated on Sep 17, 2023 6 min read DFIR