Malcolm Exercises: Cyberville PCAP
Channel: Malcolm Network Traffic Analysis Tool Suite
Date: 2021-06-01

Hands-on network traffic analysis examples with Malcolm

Download the sample files (credit to 2020 SANS ICS Virtual Conference CTF) used in the example at:
* https://malcolm.fyi/examples/Cyberville.pcap
* https://malcolm.fyi/examples/net-map.json

Introduction - 00:00:00
Identifying Hosts and Subnets - 00:01:31
Importing PCAP Data - 00:04:25
Analyze PCAP data in Kibana - 00:05:57
Analyze PCAP data in Arkime - 01:00:03
Kibana to Arkime Session Trace - 01:36:53
OT Network Assessment Tips - 01:47:31