In this video, discover what can happen if an investigator is not paying attention to the legal restrictions and imitations of a network forensics investigation.
- It's a reasonable expectation … that legal professionals would challenge … the credibility of the evidence … network forensic specialists … present in court. … A crosscheck is a way to make your evidence more credible. … What I mean is, … the same event origination from multiple devices … which makes the evidence stronger. … Firewall logs and Intrusion Detection Systems, … or IDS logs, … can all point to the same user … trying to connect to a server at a specific time. … However, for this to work … it's necessary to synchronize the clocks on the hardware … producing the log files so that the produce … accurate timestamps. … Without proper synchronization … it's impossible to correlate an event on one device … to another. … Network Time Protocol, … or NTP, … is a widespread mechanism used to automate … the process of clock synchronization. … Devices connect to an NTP server, … or to it's peers … to set their clocks periodically. … Thoroughness also increases the credibility of your data. …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.