offline:defcon26ctf
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
offline:defcon26ctf [2018/11/12 22:58] – [Retro Counters] veera | offline:defcon26ctf [2018/11/12 22:59] – [Port connections over time] veera | ||
---|---|---|---|
Line 118: | Line 118: | ||
Select //Alerts > Show All > IDS// to show the IDS alert categories seen. You can then click on an alert to drill down further or pull up PCAPs. | Select //Alerts > Show All > IDS// to show the IDS alert categories seen. You can then click on an alert to drill down further or pull up PCAPs. | ||
- | {{: | + | {{: |
Line 125: | Line 125: | ||
Trisul lets you seamlessly pivot from any analysis point to PCAPs. You can pull down entire PCAP or use the super nifty "PCAP Headers" | Trisul lets you seamlessly pivot from any analysis point to PCAPs. You can pull down entire PCAP or use the super nifty "PCAP Headers" | ||
- | {{: | + | {{: |
Line 133: | Line 133: | ||
- | {{: | + | {{: |
Line 140: | Line 140: | ||
The last one here is quite interesting. Go to Retro Counters > Select the entire Time interval and then select " | The last one here is quite interesting. Go to Retro Counters > Select the entire Time interval and then select " | ||
- | {{: | + | {{: |
offline/defcon26ctf.txt · Last modified: 2018/11/12 23:00 by veera