PACKET DETECTIVE

Traffic analysis without Wireshark. Watch a live packet capture, hunt the anomaly hiding in the noise, inspect the decode, and make the call a SOC analyst would make. Four cases, four attack patterns.

Intermediate

LIVE CAPTURE — click any packet to inspect it

No.TimeSourceDestinationProtoInfo

Packet Detail

Select a packet from the capture to see its full decode here.

ALL FOUR CASES CLEARED

ARP spoofing, DNS tunneling, port scanning, data exfiltration — you just worked the four most common patterns a SOC sees. The network doesn't lie; it just needs someone patient enough to read it.