Tactical Wireshark: A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

K. CardwellTactical Wiresharkhttps://doi.org/10.1007/978-1-4842-9291-4_1

1. Customization of the Wireshark Interface

Kevin Cardwell¹  

(1)

California, CA, USA

 

While it might not seem like a big deal, the fact is the customization of the interface is very important in the creation of an effective analysis plan. The Wireshark interface by default will display the following columns of information:

• Nos. – For the number identification of the packet within the display window.

• Time – The time the packet was captured; this is one of the columns we will want to perform some changes to.

• Source – The source of the generated packet; this can be in the form of a layer two ...