Packet Tuesday - TCP Urgent Flag

Channel:
United States SANS Cyber Defense
Subscribers:
23,600
Published on ● Video Link: https://www.youtube.com/watch?v=zFrB5NytXWo


Duration: 27:17
917 views
42

In this episode of Packet Tuesday we analyze TCP Urgent Flag.

Each Tuesday Dr. Johannes Ullrich will cover a specific network feature by analyzing a packet to help you better understand networks and network traffic.

Notes:
SEC503 Network Monitoring and Threat Detection In-Depth: https://www.sans.org/u/1obN

RFCs:
https://datatracker.ietf.org/doc/html/rfc793 TCP Original
https://datatracker.ietf.org/doc/html/rfc9293 TCP Updated
https://datatracker.ietf.org/doc/html/rfc1011 Official Internet Protocols
https://datatracker.ietf.org/doc/html/rfc6093 On the Implementation of
the TCP Urgent Mechanism

pcap:
https://packettuesday.com/pcaps/tcpurg.pcap



Other Videos By SANS Cyber Defense


2023-01-03Packet Tuesday - IP Options
2022-12-20Packet Tuesday - TLS Server Hello
2022-12-13Packet Tuesday - FreeBSD Ping Vulnerability
2022-12-08Baby Steps to the Future: Evolving into the Next-Gen SOC
2022-12-07Don't Relay Me: Empirically Diagnose Privilege Escalation via Active Directory Account Sighting
2022-12-06Packet Tuesday - TLS Client Hello
2022-12-05IR Prep and Detection Engineering When the Cloud is Your Data Center
2022-12-02Prioritizing Defensive Capabilities
2022-12-01Once Upon a Login: How Logon Sessions Help Defenders See the Bigger Picture
2022-11-30Designing Security from the Ground Up
2022-11-29Packet Tuesday - TCP Urgent Flag
2022-11-28A Deep Dive into AWS IAM Privilege Escalation Attacks: Defenders’ Edition 2022
2022-11-23Responding to Advanced Adversaries
2022-11-22Packet Tuesday - EDNS Option Type 0
2022-11-21Enabling Defenders to Conduct Incident Response Investigations with Open-Source Tools
2022-11-18Dispatch from the SOC
2022-11-17From IT to Blue Team - Your Time is Now!
2022-11-16Confidence in Chaos: Strategies for World-Class Security Operations
2022-11-15Packet Tuesday - Punycode Encoding DNS
2022-11-15Packet Tuesday - Episode 0
2022-11-02Best Practices and Lessons Learned from Starting Up OSINT Teams


Tags:
cyber defense
cyber defenders
tcp
urgent flag
tcp urgent flag
urgent flag in tcp
johannes ullrich
sans sec503
sec503
sec503 network monitoring
threat detection
network monitoring
sec503 threat detection
sec503 network monitoring and threat detection
network monitoring and threat detection
network monitoring course