Which of the following Wire shark filters can be used by her to detect TCP Xmas scan attempt by the attacker?

Rose is an incident-handler and is responsible for detecting and eliminating any kind of scanning attempts over the network by malicious threat actors. Rose uses Wire shark to sniff the network and detect any malicious activities going on.

Which of the following Wire shark filters can be used by her to detect TCP Xmas scan attempt by the attacker?
A . tcp.flags==0X 000
B . tcp.flags==0X 029
C . tcp.dstport== 7
D . tcp.flags.reset== 1

View Answer

Answer: A