Good afternoon,

I was wondering if I could get some assistance in understanding the full potential of Wireshark. I am analyzing a .pcap file where there is a EITest Evil Redirect Leading to EK. I was able to locate the compromised website as well as the IP address and domain that delivered the malicious downloadable payload. I was wondering what is the best way of determining other malicious hosts or sites in which the compromised host interacted? Is there a way to determine what other websites are related to the malware attack in Wireshark? Thanks in advance!

All your 6 posts have been about 3 security issues. Why not post in that sub-forum where the users are more likely to be experienced with the topics.

Will do My apologizes! I am still somewhat new to the site!

It's preferred to report your own thread and ask a moderator to move it instead of creating a second one.

https://www.linuxquestions.org/questions/linux-security-4/wireshark-question-4175692468