15 What was the camera model name used to take picture 20210429_152157.jpg?.14.3 Solving the quest with Zeek conn.log, ftp.log, and R.14.1 Objects in memory/packages loaded from preceding chapters.14 What country is the MAC address of the FTP server registered in?.13.3 Solving the quest with tshark custom filters (and a wee bit of R).

13.1 Objects in memory/packages loaded from preceding chapters.13 What time was a non-standard folder created on the FTP server on the 20th of April?.

12.3 Solving the quest with tshark custom filters (and a wee bit of R).

12.1 Objects in memory/packages loaded from preceding chapters.

11.4 Solving the quest with R and tshark custom filters.

11.3 Solving the quest with tshark custom filters.

11.1 Objects in memory/packages loaded from preceding chapters.

11 What is the first TLS 1.3 client random that was used to establish a connection with ?.

10.3 Solving the quest with R and Zeek ftp.log.

10.1 Objects in memory/packages loaded from preceding chapters.

9.3 Solving the quest with R and Zeek conn.log.

9.1 Objects in memory/packages loaded from preceding chapters.

9 What is the IPv6 address of the DNS server used by 192.168.1.26?.

8.3 Solving the quest with R and packets.

8.1 Objects in memory/packages loaded from preceding chapters.

8 What domain was the user connected to in packet 27300?.

7.4 Solving the quest with R and packets.

7.1 Objects in memory/packages loaded from preceding chapters.

7 What domain is the user looking up in packet 15174?.

6.4 Solving the quest with R and Zeek’s conn.log.

6.1 Objects in memory/packages loaded from preceding chapters.

6 What is the MAC address of the system being monitored?.

5.1 Objects in memory/packages loaded from preceding chapters.

Packet Maze: Solving a CyberDefenders PCAP Puzzle with R, Zeek, and tshark.

Tshark read pcap