@cirriustech #pktmon is awesome! Even since pktmon came out I have loved capturing with pktmon and then analyzing separately with #wireshark.

In case it helps, here is a link to a #QuickReference I made for pktmon. Grab the 2.0 version, it has the latest syntax.

I have not had a chance to use the new Windows Admin Center integration. Have you used that yet?

https://github.com/cyberlibrarian/pktmon-quick-reference

I have updated my #pktmon #QuickReference to reflect the latest syntax. PktMon is the #PCAP compatible built-in #Network #PacketCapture utility in #Microsoft #Windows 10 and later.

https://github.com/cyberlibrarian/pktmon-quick-reference/blob/master/pktmon_quick_reference-v2.0.pdf

Does anyone else forget that #pktmon is built into #Windows now and supports #PCAP and other formats?

I made a #QuickReference when it was released, and I still keep forgetting about it.

https://github.com/cyberlibrarian/pktmon-quick-reference

#netsec #PacketCapture