Section $3$: Challenge and Analysis

Part $1$: Locate a Target RAR File Transfer in a Packet Capture

Part $2$: Reassemble the RAR Archive from its Constituent Bytes

art $1$: Locate a Target RAR File Transfer in a acket Capture $(\frac{0}{2}$ completed$)$

Jext, open the S$3-$Capture.pcapng file $($Local isk $($C:$)>$ PCAPs$)$ in Wireshark and use the Nireshark Find feature to search for the genuine RAR archive using the value obtained through your research. Keu may also want to execute the Find operation several times to ensure there is only one packet that contains the file signature$/$magic bytes.

Record the file signature you used to find the RAR archive.