PCAP analysis

Read the entire scenario so you have an idea about what you are going to be doing. This will enable you to properly document what you are doing so that you may write an effective report of your project and subsequent findings. Remember that your final report should present your results and findings in a way you would present them to a jury, with appropriate explanations, a jury member would be expected to understand when presented in a clear and straightforward manner. Scenario On December 19th, your unit received authorization from a judge to execute a wiretap intercept search warrant for communication between two persons suspected of planning a large-scale chemical attack on a large gathering somewhere in the world during New Year’s Eve festivities. Your packet capture of their communication reveals that a .zip file named [login to view URL] was downloaded with the following SHA-1 checksum: 5a503bc382e7d3212668b1d49ac0919b642d7f14 You examined the contents of the file and delivered the information to commissioned personnel. On December 31st, two suspects were arrested and subsequently charged. Almost a year later, you are called upon to testify in the matter. Your report has been discovered to the defense. Be certain that you will be cross-examined over every detail. Final Report In a final report, describe to a jury how you determined the contents of the SMB transfer between the two suspects. The exercise will cover the topics of full-disk encryption, symmetric encryption, and network/email security. And, at the very least, the student should demonstrate a knowledge hashing, encryption/decryption, and geo-location semantics. Your paper should be at least five pages, double-spaced, and conform to APA style. Software Needed: Winzip or equivalent Veracrypt aescrypt Wireshark You will need other Web-based software to perform conversions.