POWERSHELL, Whats Come In...

with windows powershell u can simpely listen whats comming as raw data can read with EmEditor

Open UP PowerShell

as example listen to tcp traffic on ur pc:

1. New-NetEventSession -Name “WhatsComming”
2. just for information run [ logman query providers ]
3. Add-NetEventProvider -Name “Microsoft-Windows-TCPIP” -SessionName “WhatsComming”
4. Start-NetEventSession -Name “WhatsComming”
5. Get-NetEventSession

Activity

lets do some activity like open a website in ur browser ....

then open this folder [ C:\Windows\System32\config\systemprofile\AppData\Local ]

read the file named NetEventTrace.etl with EmEditor..

STOP

1. Stop-NetEventSession -Name WhatsComming
2. Remove-NetEventSession
3. Get-NetEventSession