


Pcap, Wireshark, Wireshark Tutorial, IcedID, BokBot Palo Alto Networks customers are protected from IcedID and other malware through Cortex XDR and our Next-Generation Firewall with Cloud-Delivered Security Services that include WildFire and Advanced Threat Prevention. Palo Alto Networks has published a series of Wireshark tutorials to help people gain knowledge helpful for these quizzes. Participants should also have a basic knowledge of IPv4 traffic. However, participants should have some familiarity with Wireshark. This Wireshark quiz presents a packet capture (pcap) from an IcedID infection that occurred in April 2023, and it provides experience analyzing traffic generated by this malware.Īnyone can participate in this quiz.

Also known as BokBot, IcedID is Windows-based malware that can lead to ransomware. So far in 2023, IcedID has been a relatively constant presence in our threat landscape.
