ECCouncil Cyber Technician (CCT) 212-82 Question # 56 Topic 5 Discussion

Temp_High is the command that was sent by the IoT device over the network in the above scenario. An IoT (Internet of Things) device is a device that can connect to the internet and communicate with other devices or systems over a network. An IoT device can send or receive commands or data for various purposes, such as monitoring, controlling, or automating processes. To analyze the IoT device traffic file and determine the command that was sent by the IoT device over the network, one has to follow these steps:

Navigate to the Documents folder of Attacker-1 machine.

Double-click on loTdeviceTraffic.pcapng file to open it with Wireshark.

Click on Analyze menu and select Display Filters option.

Enter udp.port == 5000 as filter expression and click on Apply button.

Observe the packets filtered by the expression.

Click on packet number 4 and expand User Datagram Protocol section in packet details pane.

Observe the data field under User Datagram Protocol section.

The data field under User Datagram Protocol section is 54:65:6d:70:5f:48:69:67:68 , which is hexadecimal representation of Temp_High , which is the command that was sent by the IoT device over the network.