Description
- .capinfos
- .dnstop
- .mitm
- Mitm proxy interception file of http and https
- .passivedns
- .pcap
- .rrd
- .weblogng
- .exe.zip
- bro
- Folder with all the bro output files
- .biargus
- Argus binary file with all the flows
- .binetflow
- Argus text file with bidirectional flows. Report time 3600 secs.
IP Addresses
- Infected host: 192.168.1.126
- Default GW: 192.168.1.2
Timeline
Wed Sep 14 11:57:26 CEST 2016
started win16
Wed Sep 14 11:58:57 CEST 2016
infected
Wed Sep 28 23:28:50 CEST 2016
power off