Cybersecurity SOC Analyst Lab - Network Analysis (Malware)

[@omil-pd7485]

What I love about him is that he does listen to viewers and do as many thing as possible to satisfied our needs, say, he does create playlists for specified vids. Keep the great going sir

[@RK-ym7nq]

Yea he is really like that kudos to this guy man

[@MyDFIR]

Of course! I appreciate everyone of yall ❤️

[@JhnyBravos]

there's no more excuses with this channel around

[@MyDFIR]

Appreciate it 🙌

[@onyekachristian7129]

Your well-detailed explanation of the processes is so good. Thank you

[@MyDFIR]

Glad it was helpful!

[@shadrachwilson1211]

Valuable information and insights. The malware analysis is great. I’m learning a lot. Thanks Steve🙏🏾😊

[@MyDFIR]

Great to hear!

[@diegomed3364]

❤❤I am always ready to start right after you

[@MyDFIR]

Thanks for watching ❤️

[@BikramShiwakoti-nk7ve]

Just following you. it's a little bit intimidating at beginning, but trying to push a bit harder.

[@MyDFIR]

Take a lot of breaks, research and you’ll get there 💪

[@Abc-sl1nf]

Looking forward to it!

[@93ksj]

Love the labs bro, thanks for sharing! ☝🏼

[@MyDFIR]

Any time!

[@Cyber.Panda.]

This channel is 🔥🔥🔥🔥🔥

[@MyDFIR]

You’re awesome ❤️

[@umarubangura9485]

Thank you for this video well details

[@MyDFIR]

Glad it was helpful!

[@chamaragunasena6437]

Love it 💕💕💕please do more videos like this ❤❤❤👌👌👌

[@MyDFIR]

More to come!

[@xCyberAce]

May be an odd question but what do you use to jot down your notes? Is there anything you’d recommend specifically for DFIR labs?
P.S. Love your content!!

[@MyDFIR]

Great question! I use either notion or excel and that has been working for me so far. Some say Obsidian is quite nice however I haven’t tried it yet.

[@VinnyBlack-p5d]

Hi, this is a great video. Very informative and I love the way you explain all your concepts. Would you be able to do a Compromised Host Triage & Binary Analysis lab? That would be very helpful as well. Thank you for all you do . I enjoy wathcing your content.

[@MyDFIR]

Absolutely! I plan on doing more of these which will eventually feed into DFIR related labs :)

[@okoneffiong653]

Great job Steve. Can this lab be added to a portfolio/Github to be shown to the hiring manager?

[@MyDFIR]

Thanks! I wouldn’t put labs on portfolios. Instead, I would talk about it if the time is right.

[@urik7793]

Great! Thank you so much!

[@williamthomas3233]

This might be a stupid question but should we be doing these lab on our virtual machine instead of our host computer?

[@MyDFIR]

Not a stupid question at all! I would recommend you perform them on a VM just to be safe 👍

[@mapletech_22]

Awesome stuff 👏 ❤

[@MyDFIR]

Thank you!

[@markyoungkush2925]

Love the videos!!

[@MyDFIR]

Thank you!!

[@junedahmed8380]

New to this so not sure if it is safe to install Wireshark on my computer Host OS and analyse this PCAP? Or do I need to use a VM in order to avoid an malware damage?

[@MyDFIR]

I would analyze everything in a VM.

[@junedahmed8380]

@@MyDFIR Do i need to isolate it as well or can allow it to have internet access

[@junedahmed8380]

@@MyDFIR How would I download files onto the VM if I have to isolate it form my host and the internet?

[@Ritmiko85]

Hello brother, is it necessary a VPN connection for these labs?

[@MyDFIR]

Nope no need

[@Ritmiko85]

@@MyDFIR thanks!

[@Abc-sl1nf]

What are your thoughts on Wazuh?

[@MyDFIR]

It’s good for practice but can be a bit complicated when deploying in production environments

[@juanpablo_88]

🔥🔥🔥🔥

[@FunRun-ve7bo]

What could be the reason the columns don't change after editing?

[@MyDFIR]

They should appear if you applied them (may need to scroll right)

[@ucheobiora7616]

Please No matter what I do it refuses to unzip the file @mydfr I used the wget command to download it on my remnux and when I type in ls it shows the zip file it just refuses to unzip

[@MyDFIR]

Sometimes the unzip command fails to unzip the file. Instead, you can try using 7z