Wireshark/Snort Analysis: WannaCry Ransomware

Please check out my Udemy courses! Coupon code applied to the following links....

https://www.udemy.com/hands-on-penetration-testing-labs-30/?couponCode=NINE99

https://www.udemy.com/hands-on-penetration-testing-labs-20/?couponCode=NINE99

https://www.udemy.com/kali-linux-web-app-pentesting-labs/?couponCode=NINE99

https://www.udemy.com/kali-linux-hands-on-penetration-testing-labs/?couponCode=NINE99

https://www.udemy.com/network-security-analysis-using-wireshark-snort-and-so/?couponCode=NINE99

https://www.udemy.com/snort-intrusion-detection-rule-writing-and-pcap-analysis/?couponCode=NINE99
Description:

This video will cover a quick overview and demonstration of the ETERNALBLUE exploit and WannaCry Ransomware. I'll be showing you how to replay a PCAP through a network interface using Tcpreplay, and how to analyze Snort IDS alerts pertaining to WannaCry Ransomware infection using Wireshark. This will be done within a Security Onion VM using VirtualBox.

How to install and configure Secuirty Onion on Virtualbox (Lab 1):

https://www.udemy.com/network-security-analysis-using-wireshark-snort-and-so/

Link to download WannaCry Ransomware PCAP:

http://malware-traffic-analysis.net/2017/05/18/index2.html

Link to McAfee Labs WannaCry Ransomware analysis report:

https://securingtomorrow.mcafee.com/mcafee-labs/analysis-wannacry-ransomware/

Видео Wireshark/Snort Analysis: WannaCry Ransomware канала Jesse K