312-49V11: Computer Hacking Forensic InvestigatorDemo

Taylor, a forensic expert, has been assigned to investigate a cyberattack on an organizational host server. The server has been compromised, and, during the investigation, Taylor must analyze network traffic to identify the attack’s entry point. Using Wireshark, Taylor examines a packet-capture file and observes an unusual pattern of repeated failed login attempts over the FTP protocol. Based on these failures, Taylor suspects a brute-force attack against the FTP service. Taylor’s next step is to confirm whether the attacker successfully logged in to the FTP server after the failures. To verify that the attack succeeded, Taylor needs to identify the specific FTP-server response code that indicates a successful login. Which of the following Wireshark filters will help Taylor confirm successful FTP login attempts?