This video defines what firewall logs are and explains their significance in network forensics.
- [Instructor] Firewalls are a key element of audit logs … and a rich source of network forensics data. … Firewalls generate logs … of various access control activities. … Firewalls utilize user-defined rules … to decide on what to do with a packet … that is requesting an entry into … or an exit out of a network. … Please note the word exit here. … Firewalls control outgoing traffic too. … They do this to prevent … confidential or sensitive information … from getting out of a protected network environment. … Firewall rules are primarily used for three actions. … Accept, deny and forward packets. … Firewalls usually create a log entry … when they detect and drop packets … destined to an unauthorized host or application. … These log entries contain information … on where the packet originated from … and where it's intended to go. … The origin address information … is captured by a host IP address … and an application port number … found in the header portion of a packet. … As you may remember, …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.