Gain an understanding of various sources of network data in this video.
- [Narrator] As cyber criminals expand … their territory on the internet, … the demands for evidence data in network forensics … is also rapidly growing. … None of the mainstream network forensics tools … can function optimally without access … to several data sources. … Therefore, readily available data in various origins … is crucial in producing satisfactory … and meaningful network forensics reports. … Network forensics data comes from many different places, … including software, hardware, and media. … Packet sniffers are the most obvious data source. … They capture live packets … that could contain criminal evidence such as, … stolen information and traces of intrusion attempts. … Sniffing can occur at hosts, switches, and routers. … Firewalls are another data source and create log entries … whenever they drop a packet. … They are the first line of defense in network security, … and also, one of the biggest targets … for cyber security attacks. … Intrusion Detections Systems, or IDS, …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.