From 0ea0cf167c786672594c9348f5f5663afed23e47 Mon Sep 17 00:00:00 2001 From: mether049 Date: Sun, 14 Jun 2020 16:35:19 +0900 Subject: [PATCH] Update malware-analysis_ref_and_memo.md --- malware-analysis_ref_and_memo.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md index 40b036e..84d082b 100644 --- a/malware-analysis_ref_and_memo.md +++ b/malware-analysis_ref_and_memo.md @@ -109,6 +109,9 @@ DFIR,マルウェア解析,OSINTに特化したUbuntuベースのディスト - **[Packetmon](https://blogs.windows.com/windowsexperience/2019/08/20/windows-admin-center-preview-1908/)** - ref: - [Windows 10 quietly got a built-in network sniffer, how to use](https://www.bleepingcomputer.com/news/microsoft/windows-10-quietly-got-a-built-in-network-sniffer-how-to-use/) +- **nfdump** +- **nfcapd** +- **nfpcapd** ### Forensic - **Windows Log**