Diving right into the traffic of some pretty hairy current malware, mostly focussing on recent ransomware used in popular exploit kit or email phishing campaigns. Pointing out small novelties that reaffirm the mantra to not make assumptions and review everything available. Pcaps and a small, completely free python tool or two authored by the presenter will be provided on the day. Some talk of automation but highlighting the crucial aspect of eyeballing traffic to spot the cool bits.