Welcome back, everyone.
This is new shaggin, and I welcome you, all of you, for this wonderful, lovely cause that's on trend
hunting with Wireshark people who are either on networking or system administration or any of the IP
people might be aware about Wireshark, but this is one of the most powerful and robust tools that can
be used for troubleshooting many IP related stuff, Web application challenges.
And you can actually go very deep inside to understand what really went wrong and what could be the
big fix, what could be the solutions to come over from that challenge.
Now we are going to use washrag, especially for the threat.
Hunting in our case will understand how can we use Wireshark tool to find out any malicious strophic?
That could be a phishing e-mail.
It could be any malicious file.
It could be any malicious user in the network.
So it's going to be a lot of fun.
And I hope you want to enjoy this entire course and let's get started.
So the first thing that we'll be doing is, will be I'll be taking you through the wash to the you know,
how the two product really looks like so far that will have to get the Wireshark to install on our system.
So what you can do is you can make use of any browser, let's say I can go for it and then simply search
for Warshak.
Those who have been using it for them, it won't be a challenge just to give you an idea there to support
it for those 64 32 Mac OS and Linux as well.
And, of course, we can will be also using it on our candy machine as well.
But sometimes because it is not something where you you need to have a secure environment, you can
make use of it even on the infected machines.
All right.
So we'll be making use of it on the Windows machine and of the machine as well, which is, again,
going to be a big machine in a way.
So once that is downloaded, you just click on it.
There will be multiple click, click, click, and you get installed with teashop, which is the UCLA
version of it.
If you want to impress your colleagues or your friends about how how the workshop really looks like
on the cloud.
This is for you for the rest of the folks.
If you really want to make use of it for this wonderful UI, you can go for Wireshark as well.
Wireshark to learn other than dishrag.
You also get to have you also will be having unmap installed by default.
There will be a gap of options to also get installed for you as BITA.
So this will be the Add-On Software which usually get installed with it.
Once it is installed.
You can quickly search for Wireshark.
Once you hit, enter the first thing that comes for you to select the interfaces, select this one and
this by default.
Whatever the traffic that is there on your wireless interface that we have just selected, you get to
see all the traffic with it.
And for those who are new to the networking or new to security or anything, you will be talking about
the entire Wireshark stack one by one for them to give them more idea about it.
So what are all you can do?
There are a lot of fun.
You can have a look at the statistics.
You can get to know the entire hierarchy of the protocol where very you can get the idea where you can
get the idea what all protocols we have as per the stacks from the IP for BTP, IP and everything.
In fact, you can also get the idea about what are the different ports and different IP addresses available
or in fact are communicating.
So you get to know how many packets are displayed on real time.
That's 100 percent.
If you filter if you apply any kind of a filter, let's say I apply, will talk about it in more detail.
But just to give you an example, if let's say I apply a filter for IP address, you can get to see
these are the one one one that are these many packets has been selected, which are nine point five
percent of the entire package that are going back and forth.
All right.
So this is just an idea.
Just to show you how this really looks like, you can zoom zoom in a bit more.
You can zoom out as well there once once you select any of the packet.
These are multiple stacks.
You can get to get through the frames to 800 packets to IP address to Tsipi IP mode and even application
headers as well, which could be SCDP, DNS, SBP, all the strophic.
Right.
So this is just about the interaction going further.
There are a lot of fun and trust me, you would enjoy this.
All right.
So be with me to the scores and we'll catch you in the next one.
Thank you.