Investigating an LLMNR Poisoning Attack with Wireshark and Hashcat: Responder Detection, NetNTLMv2 Capture, and Offline Password Cracking
Analyzing Malware Delivery from a PCAP File with Wireshark and VirusTotal: Payload Extraction, AsyncRAT Identification, and Living-off-the-Land Binary Abuse
Investigating an NTLM Relay Attack with Wireshark and Event Log Explorer: SMB Analysis, Remote Registry Access, and Lateral Movement
Phishing Email Analysis Using Thunderbird and VirusTotal: Header Investigation, URL Reputation, and Trusted-Platform Abuse
Investigating a Drive-By Compromise: Browser Forensics, MFT Analysis, BITS Abuse, and Malware Attribution
