πŸ“‚ 02 - D3FEND Network Traffic

Overview

Evidence captured off the wire β€” packet captures (.pcap/.pcapng) and flow records. Analysis reconstructs sessions, requests, transferred files and C2/exfiltration channels from the traffic itself.

D3FEND artifact: Network Traffic


🧠 Techniques

FileCreated

πŸ“¦ Tech Stack

FileCreated

πŸ› οΈ Tools

FileCreated
(incomplete) WireSharkJuly 31, 2026
Filedifficulty
HTB Sherlock - VantageVery Easy