Network Forensics with Tshark

In this video we are gonna look into Tshark and how to use it for network forensics. If you don’t know Tshark, it is basically the little brother of wireshark, you can think of it as a command line version of Wireshark, so it can be used for capturing and analysing packets, the main difference is the fact that it is a command-line program, so you can use it in any situation where you don’t have access to a graphical interface or when the resources are limited.