Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools [NulledPremium]

For More Ebooks Visit NulledPremium >>> NulledPremium.com



Book details
File Size: 36 MB
Format: pdf
Print Length: 383 pages
Publisher: Packt Publishing; 1 edition (March 30, 2019)
Publication Date: March 30, 2019
Sold by: Amazon.com Services LLC
Language: English
ASIN: B07FDBJ52L

Gain basic skills in network forensics and learn how to apply them effectively

Key Features

Investigate network threats with ease
Practice forensics tasks such as intrusion detection, network analysis, and scanning
Learn forensics investigation at the network level
Book Description

Network forensics is a subset of digital forensics that deals with network attacks and their investigation. In the era of network attacks and malware threat, it’s now more important than ever to have skills to investigate network attacks and vulnerabilities.

Hands-On Network Forensics starts with the core concepts within network forensics, including coding, networking, forensics tools, and methodologies for forensic investigations. You’ll then explore the tools used for network forensics, followed by understanding how to apply those tools to a PCAP file and write the accompanying report. In addition to this, you will understand how statistical flow analysis, network enumeration, tunneling and encryption, and malware detection can be used to investigate your network. Towards the end of this book, you will discover how network correlation works and how to bring all the information from different types of network devices together.

By the end of this book, you will have gained hands-on experience of performing forensics analysis tasks.

What you will learn
Discover and interpret encrypted traffic
Learn about various protocols
Understand the malware language over wire
Gain insights into the most widely used malware
Correlate data collected from attacks
Develop tools and custom scripts for network forensics automation
Who this book is for

The book targets incident responders, network engineers, analysts, forensic engineers and network administrators who want to extend their knowledge from the surface to the deep levels of understanding the science behind network protocols, critical indicators in an incident and conducting a forensic search over the wire.
Table of Contents

Introduction to Network Forensics
Technical Concepts and Acquiring Evidence
Deep Packet Inspection
Statistical flow analysis
Combating Tunneling and Encryption
Investigating Good, Known and the Ugly Malware
Investigating C2 Servers
Investigating and Analyzing Logs
WLAN Forensics
Evidence Segregation