Netcat
Description
Netcat is a simple network utility which reads and writes data across network connections using TCP or UDP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts.
Personal Review
Netcat is a great tool for forensic analysis especially because you can pipe all your commands on the victim computer to your forensic workstation. I find that this helps promote validity of process in case you ever actually end up in the court of law putting bad guys in the slamma-jamma with yo mad forensic powazz.
Personal Usage Notes
Use Netcat every time you do a forensic analysis. It's best practice and will help you stay organized with your commands the information those commands return. Use a cheat sheet and practice running the different commands so that you can become a master! Seriously though, if you're into forensics you'll probably be using this tool a lot and the faster you get it down the more time you will save.
Source URL
Source: http://nc110.sourceforge.net/
SANS Cheat Sheet: https://www.sans.org/security-resources/sec560/netcat_cheat_sheet_v1.pdf
No comments:
Post a Comment