Network Traffic Analysis Cyber Range

Get Started

The Labs

Train hands-on

Introduction to Terminal Shark

Terminal Shark, or TShark, is the command-line version of Wireshark, a commonly used network traffic analysis tool. This lab is designed to introduce Terminal Shark, including some of the most common command flags and uses.
Traffic Replay and Live Traffic Analysis in TShark

This lab explores some of the options available when performing live traffic analysis with Terminal Shark (TShark).
Extracting Files from Traffic Samples in TShark

Traffic captures commonly include files that are of interest to incident responders. Emails may include embedded malicious files, or multi-stage malware may download additional malware to achieve certain purposes. Since some malware removes itself from the system after execution, extracting it from a network capture may be the only option to get a copy. This lab explores methods of extracting files from network traffic using Terminal Shark (or TShark).

Buy Now 7-Day Free Trial

Book a Meeting

Team administration and reporting
Dedicated client success manager
Single sign-on (SSO)

Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
Integrations via API

Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
190+ role-guided learning paths and assessments (e.g., Incident Response)
100s of hands-on labs in cloud-hosted cyber ranges
Create and assign custom learning paths
Custom certification practice exams (e.g., CISSP, CISA)
Optional upgrade: Guarantee team certification with live boot camps

Learn about scholarships and financing with

Start a Free Trial