Advanced Wireshark Network Forensics - Part 3/3

There was a Denial of Service (DoS) attack that was reported against our FTP server. And it also seems like there were some FTP traffic spikes that were seen prior to the FTP server being taken offline. We aren't told much more than this, which makes our goals a bit abstract. We'll start with a general list of goals, and then use our pcap forensics process to build them out as we continue through our investigation.

Scenario pcaps:
https://github.com/NetsecExplained/Ad...