In this lecture I will explain about how to use the follow TCB stream feature in Wired shark to find
malicious files and then instruct them to be analyzed with a surface like Virus Total for example.
So here is security union.
If I opened the quill application then I would go to the escalating events and then click on the alert
I.D. and then select to why would do our shark.
So here why a shark.
If I clicked on follow stream and from our it is in squeal
if we click control you see that we have an excel file so why a shark.
I will search for the XY and here we see that we have this UHC file so now in white shark I will struck
me fine.
So how you see the file and I will save it into the scope.
Example and then I will open a browser then I will go to Virus Total and then we upload the file.
Now we see that the file is being released so we see that file is indeed malicious and is protected
by
most viruses.
So in this little I have explained how to use the follow TCB stream feature in my shark to find malicious
files and then extract them to be analyzed by surfaces like virus total.
For example.