Uploaded July 2026 | Updated September 2026, 1 week ago

---

lawrence.video

My VM Packet Capture
github.com/lawrencesystems/youtubedemos/blob/main/Capture_VM_Packets.sh

Doug Burk So-Crates Github
github.com/dougburks/so-crates

My Security Onion Video
youtu.be/k22Pt19OTdo?si=lZWka1dLD5nYG1Hk

The previous video regarding the Threat Actor Arrest
youtube.com/shorts/kOoP4BSATJs




Connect With Us
---------------------------------------------------
+ Hire Us for a project: lawrencesystems.com/hire-us
+ Toms' Twitter 🐦 twitter.com/TomLawrenceTech
+ Our Website lawrencesystems.com
+ Our Forums forums.lawrencesystems.com
+ Instagram instagram.com/lawrencesystems
+ Facebook facebook.com/Lawrencesystems
+ GitHub github.com/lawrencesystems


Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 amazon.com/shop/lawrencesystemspcpickup

UniFi Affiliate Link
🛒 lawrence.video/unifi-affiliate

All Of Our Affiliates help us out and can get you discounts!
🛒 lawrencesystems.com/partners-we-love

Gear we use on Kit
🛒 kit.co/lawrencesystems

Use OfferCode LTSERVICES to get 10% off your order at
🛒 https://www.techsupplydirect.com?aff=2

Digital Ocean Offer Code
🛒 https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems

Protect your privacy with a VPN from Private Internet Access
🛒 privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
💰 patreon.com/lawrencesystems


Chapters
0:00 The Hacker Windows Caught
0:26 The Experiment: Fresh Windows in Proxmox
0:40 Finding the VM Interface
1:27 Capturing with tcpdump
1:53 The Auto-Capture Script
3:11 Pulling the PCAP and Opening Wireshark
3:51 Filtering for SNI: Where Windows Phones Home
4:15 Easier Analysis with SO-CRATES
5:03 Reading the Results: DNS, HTTP, TLS
6:12 The EFF Shirt and Can You Block It?
7:51 Why I Trust Linux More
8:00 Wrap-Up