Windows Packet Capture Made Easy

Learn to use Pktmon for packet capture and monitoring!

5.00 (2 reviews)

Udemy

platform

English

language

Network & Security

What you will learn

Use built-in Windows commands to capture real time network traffic

Learn the pktmon command and master packet capture configurations

Work with filters and capture lists that collect network traffic

Develop custom filters to work with ports, protocols, TCP Flags, and more!

Write filters to help detect SYN scans

Use pktmon to collect traffic for a low-interaction honeypot

Create a proof of concept Python GUI for building filters

Why take this course?

Sometimes when using Windows Workstation and Server, it seems like your options for capturing packets is limited in some ways.

The Good News:

Microsoft recently released a tool that you might not know about....Packet Monitor (pktmon.exe). It's an easy to configure, lightweight packet capture tool. And it comes installed on Windows 10+ and Windows Server 2019+.

This course is all about getting you up and running with Pktmon. We're going to cover the basics of packet capture and the look at how this command line tool can automate the collection of network packets. Once we're familiar with the tool, we'll start writing custom filters that control what types of traffic is ignored and what traffic is captured. Following that, we'll take a look at how you can save collected packets in different file formats.

During the course, expect to cover:

Pktmon architecture
Packet capture basics
Pktmon command line usage
Writing single capture filters
Building more complex capture filters and scripting
Use cases for detecting unwanted network traffic
Use cases for building a low interaction honeypot
Code examples for building a Python UI to support filter writing
And more...

This is a great course for anyone who is interested in getting started with packet capture and analysis. Even if you have no experience, you'll be up and running with Pktmon in no time.

Get started today by enrolling in: Windows Packet Capture Made Easy

Screenshots

Windows Packet Capture Made Easy - Screenshot_01

Windows Packet Capture Made Easy - Screenshot_02

Windows Packet Capture Made Easy - Screenshot_03

Windows Packet Capture Made Easy - Screenshot_04

Reviews

Román

June 2, 2023

This course is perfect if you are not in the mood to read the Microsoft documentation. Sometimes you just want someone to explain things to you. The tool is well explained here, with plenty of examples, and it's short. The use cases and the Python project make this course outstanding. You can even show them to a potential employer if you add a couple of features. Pktmon is useful when you are dealing with Windows servers: you can't install wireshark and you need something to make a quick troubleshoot. Props to the creators! Thank you.

Charts

Price

Rating

Enrollment distribution

Windows Packet Capture Made Easy - Distribution chart