Description
Files
- .capinfos
- .dnstop
- .mitm
- Mitm proxy interception file of http and https
- .passivedns
- .pcap
- .rrd
- .weblogng
- .exe.zip
- bro
- Folder with all the bro output files
- .biargus
- Argus binary file with all the flows
- .binetflow
- Argus text file with bidirectional flows. Report time 3600 secs.
IP Addresses
- Infected host: 10.0.2.110
- Default GW: 10.0.2.1
Timeline
Thu Jul 7 21:44:19 CEST 2016
Started win10
Thu Jul 7 21:47:17 CEST 2016
infected
Tue Jul 12 08:30:50 CEST 2016
power off