MENU
A major metropolitan municipal corporation had deployed an extensive loT network for managing various facilities in the city. A recent cyber attack has paralyzed the city's vital services, bringing them to a complete halt. The Security Operations Center (SOC) has captured the network traffic during the attack and stored It as loT_capture.pcapng in the Documents folder of the Attacker Machine-1. Analyze the capture file and identify the command that was sent to the loT devices over the network. (Practical Question)
To analyze the IoT network traffic capture and identify the command sent to IoT devices, follow these steps:
Open the Capture File:
Use a network analysis tool like Wireshark to open the IoT_capture.pcapng file.
Filter and Analyze:
Apply appropriate filters to isolate relevant traffic. Look for command patterns typically sent to IoT devices.
Identify the Command:
Upon analyzing the captured traffic, the command Forest_Fire_Alert444 is identified as the one sent over the network to IoT devices during the attack.
Wireshark User Guide: Wireshark Documentation