Security Onion to Analyze Traffic Capture

Use Security Onion to Analyze a Large Traffic Capture

Download Security Onion here: https://securityonionsolutions.com/software (Links to an external site.)

Security Onion Tutorial (https://www.youtube.com/watch?v=5fxVaVO8-L8&list=PLljFlTO9rB155aYBjHw2InKkSMLuhWpxH)

Goal: Using the tools in Security Onion, analyze a publicly available traffic capture (i.e. Defcon CTF Capture).

Potential data sources:

Contagio (http://contagiodump.blogspot.com/2013/04/collection-of-pcap-files-from-malware.html)
Netresec Public PCAP Data (https://www.netresec.com/?page=PcapFiles)
Analyze 5 scenarios from this website https://malware-traffic-analysis.net/training-exercises.html (Links to an external site.)

Written Paper (max. 6 pages of Main Content), containing:
Overall description
Identify the traffic capture – source and description
Summary of the analysis tools used (minimum of three (3) tools required)
Rate the performance of the tools (some work better than others)
Findings – malware or other items that were found/identified
Conclusion

Last Completed Projects