Wireshark

Description

Wireshark is the world's most widely used network protocol analyzer, enabling deep inspection of hundreds of protocols with live capture and offline analysis. It provides powerful display filters, VoIP analysis, and decryption support for protocols like TLS, WPA2, and IPsec.

Use Cases

• Capture and analyze network traffic in real time
• Troubleshoot network performance and connectivity issues
• Inspect protocol-level details for security investigations

Attack Phases

MITRE ATT&CK Techniques (1)