This video provides an overview of network forensics hardware tools.
- [Narrator] Much of forensics evidence … resides in network data. … Which is why it's a top priority … to record the traffic between various devices. … Higher end switches and routers … come with a port mirroring feature, … which allows them to send a copy of all data … going through on one port to another. … An investigator plugs a network cable into a mirror port, … and connects it to a network recorder … to capture live packets. … The term packet here means, … the smallest unit of network data … transmitted or received by a NIC at a give time. … Enabling port mirroring is as simple as … making a few clicks. … This table shows that the destination port … mirrors the source port network traffic. … Don't get disappointed if your device … doesn't have a mirroring capability. … There are hardware network sniffers like this one. … Do you see the arrow with the TAP label? … That's where you connect a piece of recording equipment. … In wireless networking, eavesdropping is easier … because access points, or APs, broadcast their signals. …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.