Malware:ITX8060:2011:LAB3: erinevus redaktsioonide vahel

Allikas: Lambda
Mine navigeerimisribale Mine otsikasti
Toomasl (arutelu | kaastöö)
Toomasl (arutelu | kaastöö)
5. rida: 5. rida:


  * Download  [https://sim.cert.ee/hw/download.pcap download.pcap]
  * Download  [https://sim.cert.ee/hw/download.pcap download.pcap]
  * Find malware download in this pcap and Extract malware  
  * Find malware download in this pcap and Extract malware or malwares
  * find out where malware was downloded from  
  * find out where malware was downloded from  
  * What malware changes in system.
  * What malware , malwares changes in system.
  * C&C Names  and aadress.
  * C&C Names  and aadress.
  * document the process -  Where You found hints and how exactly You did it  (you need to show Your thought
  * document the process -  Where You found hints and how exactly You did it  (you need to show Your thought

Redaktsioon: 30. november 2011, kell 18:58

Analyse an malware

Milestone: 08.12.2011 - 00:00

* Download  download.pcap
* Find malware download in this pcap and Extract malware  or malwares
* find out where malware was downloded from 
* What malware , malwares changes in system.
* C&C Names  and aadress.
* document the process -  Where You found hints and how exactly You did it  (you need to show Your thought
and communication process - please write a summary of it.)
* Write an intsident raport.

consider malware analysis report reminders