Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

An employee of the X company named Jameson informed the IS department that his laptop has been hacked. There are strong allegations that Jameson usually

An employee of the X company named Jameson informed the IS department that his laptop has been hacked. There are strong allegations that Jameson usually visit websites that are not related to the company's work, and they might be malicious. Jameson denied the allegation, saying that someone has installed the malware by any other mean such as connecting USB. Luckily, the network traffic of the company is monitored and saved on daily basis. You have been given the PCAP file, analyze it according to the following questions.
1. Is there any infected file present in those files?
2. Note down the URI of the site that dropped malicious files.
3. Note down the IP assigned to the machine that downloaded the files.
4. Find the IP address of the attacker sever.
5. Find the mac address of the machine that downloaded the files.
6. Find out the host name of the machine that downloaded the files.
7. How many times the infected files had been downloaded
I want the answer to be step by step
from this image how can i know which one is malware downloded
image text in transcribed

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Essential SQLAlchemy Mapping Python To Databases

Authors: Myers, Jason Myers

2nd Edition

1491916567, 9781491916568

More Books

Students also viewed these Databases questions

Question

Write Hund's rule?

Answered: 1 week ago

Question

2. Employees and managers participate in development of the system.

Answered: 1 week ago