How to Leverage PowerShell to Create a User- Friendly Version of WinDump

WinDump is often used to analyze packet captures by incorporating Berkeley Packet Filters, to reduce large captures into manageable subsets. The filtering makes use of macros to easily specify common protocol properties, however, analyzing other properties requires a deeper understanding of the...

By

Robert Adams

January 18, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 18, 2024

A Prescription for Windows Prefetch Analysis

The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.

Coolest Careers Poster

Digital Forensics, Incident Response & Threat Hunting

SANSがおすすめするサイバーセキュリティの仕事20選: サイバーセキュリティアナリスト/エンジニア

サイバーセキュリティアナリスト/エンジニアの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Blog_teaser_images_(5).png

Digital Forensics, Incident Response & Threat Hunting

February 7, 2022

SANS DFIR Course Roadmap and Job Role Matrix

Here is our suggested Course Roadmap to guide you in your search for training. Use the Job Role Matrix to match a course with common job roles in DFIR