Implementing Full Packet Capture

Full Packet Capture (FPC) provides a network defender an after-the-fact investigative capability that other security tools cannot provide. Uses include capturing malware samples, network exploits and determining if data exfiltration has occurred. Full packet captures are a valuable troubleshooting...

By

Matt Koch

November 7, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

CD - Blog - Making Linux Security Accessible Blog Series - Part 5 -340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Network Security Basics: Connecting Safely – Part 5 of 5 of the Terminal Techniques for You (TTY): Making Linux Security Accessible Blog Series

Secure your Linux system by managing open ports, configuring firewalls, and using SSH best practices to minimize exposure to cyber threats.

Charles Goldner

DFIR - Blog - Are Ransomware Victims Paying Less_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Are Ransomware Victims Paying Less? Insights from the Latest Stay Ahead of Ransomware Live Stream

In this month's reboot of the SANS Stay Ahead of Ransomware live stream, we dove into one of the most pressing questions in cyber extortion today.

DFIR - Blog - FOR508 Evolves as Threat Hunting Shifts In-House_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

FOR508 Evolves as Threat Hunting Shifts In-House

The Spring 2025 FOR508 course refresh includes upgrades to materials on credential theft, enhanced threat hunting, and modern attacker techniques.