Book description
Gain basic skills in network forensics and learn how to apply them effectively
Key Features
- Investigate network threats with ease
- Practice forensics tasks such as intrusion detection, network analysis, and scanning
- Learn forensics investigation at the network level
Book Description
Network forensics is a subset of digital forensics that deals with network attacks and their investigation. In the era of network attacks and malware threat, it's now more important than ever to have skills to investigate network attacks and vulnerabilities.
Hands-On Network Forensics starts with the core concepts within network forensics, including coding, networking, forensics tools, and methodologies for forensic investigations. You'll then explore the tools used for network forensics, followed by understanding how to apply those tools to a PCAP file and write the accompanying report. In addition to this, you will understand how statistical flow analysis, network enumeration, tunneling and encryption, and malware detection can be used to investigate your network. Towards the end of this book, you will discover how network correlation works and how to bring all the information from different types of network devices together.
By the end of this book, you will have gained hands-on experience of performing forensics analysis tasks.
What you will learn
- Discover and interpret encrypted traffic
- Learn about various protocols
- Understand the malware language over wire
- Gain insights into the most widely used malware
- Correlate data collected from attacks
- Develop tools and custom scripts for network forensics automation
Who this book is for
The book targets incident responders, network engineers, analysts, forensic engineers and network administrators who want to extend their knowledge from the surface to the deep levels of understanding the science behind network protocols, critical indicators in an incident and conducting a forensic search over the wire.
Publisher resources
Table of contents
- Title Page
- Copyright and Credits
- Dedication
- About Packt
- Contributors
- Preface
- Section 1: Obtaining the Evidence
- Introducing Network Forensics
- Technical Concepts and Acquiring Evidence
- Section 2: The Key Concepts
- Deep Packet Inspection
- Statistical Flow Analysis
- Combatting Tunneling and Encryption
- Section 3: Conducting Network Forensics
- Investigating Good, Known, and Ugly Malware
- Investigating C2 Servers
- Investigating and Analyzing Logs
- WLAN Forensics
- Automated Evidence Aggregation and Analysis
- Other Books You May Enjoy
- Assessments
Product information
- Title: Hands-On Network Forensics
- Author(s):
- Release date: March 2019
- Publisher(s): Packt Publishing
- ISBN: 9781789344523
You might also like
book
Network Forensics: Tracking Hackers through Cyberspace
“This is a must-have work for anybody in information security, digital forensics, or involved with incident …
book
Practical Cyber Forensics: An Incident-Based Approach to Forensic Investigations
Become an effective cyber forensics investigator and gain a collection of practical, efficient techniques to get …
book
Cyber Security and Digital Forensics
CYBER SECURITY AND DIGITAL FORENSICS Cyber security is an incredibly important issue that is constantly changing, …
book
Hands-on Incident Response and Digital Forensics
In this practical guide, the relationship between incident response and digital forensics is explored and you …
