blue · Medium · 170 XP · 4 hours

Network Visibility & Traffic Analysis

Network Visibility & Traffic Analysis focuses on hands-on analysis of network traffic using real protocols, packet inspection, and security tools to detect suspicious and malicious activity.

Tactical attack scenario

Your corporate network is undergoing a stealth scan. Extract PCAP files, analyze active connections, locate packet injection points, and write IDS blocks.

Learning objectives

Inspect live packet streams using Wireshark syntax
Trace TCP/IP handshakes and analyze DNS query parameters
Identify active network port scans and enumeration payloads
Draft custom Snort and Suricata rules to flag anomalous traffic

Recommended background

Basic terminal use and familiarity with the topic area are helpful.

Estimated duration: 4 hours.

This public overview contains no flags, credentials, or solution steps. Practise only in the provided authorized environment.