stub priority 20 35 min. 60 XP.

Packet Capture Analysis with tshark

Reading PCAPs on the CLI: filters, flows, credentials in cleartext. Useful for CTF forensics.

Prerequisites

TCP Ports & Services. ss, netstat, lsof, nmap

DCWF roles: EN-211 Forensics Analyst CE-443 Network Analyst CS-511 Cyber Defense Analyst

Lesson stub

The catalog entry exists so the dependency graph can reference it. Full content is pending. In the meantime, the error-mode pages for the scored services this lesson covers include the same fix playbooks.