A denial-of-service (DoS) attack against the FTP server 192.168.56.1 has been reported. Prior to the FTP service being taken down, there were significant increases in FTP traffic. This link will provide to you a network packet capture that has been captured. Is it possible to identify the IoCs of this case from the viewpoint of an investigator? Synthesize the appropriate filters that may be utilized to finish your research and answer the following questions by using the packet capture analysis technique. What was the source of the sudden increase in FTP traffic? What happened in the hours and minutes before the FTP site was taken offline? Any files were transmitted to or from the FTP server, and were any user accounts compromised as a result of this?
A denial-of-service (DoS) attack against the FTP server 192.168.56.1 has been reported. Prior to the FTP service being taken down, there were significant increases in FTP traffic. This link will provide to you a network packet capture that has been captured.
Is it possible to identify the IoCs of this case from the viewpoint of an investigator?
Synthesize the appropriate filters that may be utilized to finish your research and answer the following questions by using the packet capture analysis technique.
What was the source of the sudden increase in FTP traffic?
What happened in the hours and minutes before the FTP site was taken offline?
Any files were transmitted to or from the FTP server, and were any user accounts compromised as a result of this?
Trending now
This is a popular solution!
Step by step
Solved in 2 steps
