AKINOLASELIM · AKINOLASELIM · May 6, 2026 · May 6, 2026
diff --git a/1.1xx.png b/1.1xx.png
diff --git a/README.md b/README.md
@@ -24,6 +24,8 @@ Investigation Analysis
 1. Understand the Environment
 Used Statistics → Conversations → Endpoints to map all active hosts and identify the top talkers in the capture before applying any filters.
 
+![Statistics](image/https://github.com/AKINOLASELIM/Network-Traffic-Analysis-NetSupport-Manager-RAT-Detection/blob/image/statistics.png?raw=true)
+
 2. Confirm the C2 Communication
 ip.addr == 45.131.214.85
 All traffic to the known C2 IP was exclusively between 45.131.214[.]85 and internal host 10.2.28.88 — confirming a single compromised machine.

diff --git a/hostname.png b/hostname.png
diff --git a/https404.png b/https404.png
diff --git a/kerberos-name-of-the-victim.png b/kerberos-name-of-the-victim.png
diff --git a/mac address.png b/mac address.png
diff --git a/netsupportermanager.png b/netsupportermanager.png
diff --git a/osintonnetworkmanager.png b/osintonnetworkmanager.png
diff --git a/post-beaconing.png b/post-beaconing.png
diff --git a/statistics.png b/statistics.png
diff --git a/virus totalonip.png b/virus totalonip.png