This repository contains solutions to exercises from malware-traffic-analysis.net, focusing on PCAP analysis and threat detection using tools like Wireshark and VirusTotal.
- Each report is a separate Markdown file, named after the exercise date and title (e.g.,
2017-07-22-traffic-analysis-exercise-where-dreams-are-made.md). - Reports include analysis of the PCAP file and identification of malicious activity.
- Wireshark: primary tool for PCAP analysis
- VirusTotal: used for malware analysis and threat intelligence
- Other tools (as needed):
- Suricata: threat intelligence and IOCs
- Exercises are sourced from malware-traffic-analysis.net, a website providing PCAP files and exercises for malware traffic analysis.
- Note: This repository does not include the original PCAP files or exercise materials.
This repository is licensed under a Creative Commons Attribution 4.0 International License. See the LICENSE file for more information.
The contents of this repository are for educational purposes only. Malware traffic analysis can be a complex and nuanced field, and the solutions provided here should not be considered production-ready or applicable to real-world scenarios without further testing and validation.