Cyber Security and Forensic Computing Assignment.

The assessment of the security of internet connected servers and the reconstruction of activities from a network traffic capture (e.g. a PCAP file) is a difficult task. In this assignment you will be required to use some of the investigative and analytical skills that you have gained from your forensics training, as well as your knowledge of cyber security processes and techniques.

Your task is to assess the security of an internet-connected server, and to reconstruct the activities that took place on the server from a network traffic capture (PCAP) file.

You should submit a report detailing your findings. Your report should include:

A description of the server that you assessed, including its operating system and any software that is installed on it

A description of the security risks that you identified

A description of the activities that you reconstructed from the PCAP file, including any malicious activity that you identified

Your report should be well-written and well-organized, and should use appropriate technical language.