<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Network Forensics on Vlad Șteopoaie</title><link>https://steopoaie.vlad.md/topics/network-forensics/</link><description>Recent content in Network Forensics on Vlad Șteopoaie</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Vlad Șteopoaie</copyright><lastBuildDate>Fri, 11 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://steopoaie.vlad.md/topics/network-forensics/index.xml" rel="self" type="application/rss+xml"/><item><title>Lockdown</title><link>https://steopoaie.vlad.md/writeups/cyberdefenders/lockdown/</link><pubDate>Fri, 11 Sep 2026 00:00:00 +0000</pubDate><guid>https://steopoaie.vlad.md/writeups/cyberdefenders/lockdown/</guid><description>Reconstruct a multi-stage intrusion by analyzing network traffic, memory, and malware artifacts using Wireshark, Volatility, and VirusTotal, mapping findings to MITRE ATT&amp;amp;CK.</description></item></channel></rss>