Workshop - Cyber Security & Network Forensics Analysis -

Workshop – Cyber Security & Network Forensics Analysis

Category: Security / Forensics

Format: Virtual

Cyber Security & Network Forensics Analysis Using Wireshark What is the purpose of this class? This course meets the need to develop trained, experienced Network Forensic Analysis personnel.. Description: Effective Network Forensics Analysis requires capturing large amounts of data and.. read more below

Virtual

duration: 1 day

6-16 class size

English

No data available yet.

Or you interested in this course? Request more information.

Cyber Security & Network Forensics Analysis Using Wireshark

What is the purpose of this class?

This course meets the need to develop trained, experienced Network Forensic Analysis personnel..

Description:

Effective Network Forensics Analysis requires capturing large amounts of data and discerning unusual patterns hidden within seemingly normal network traffic. This workshop provides the student with investigative techniques focusing on the use of Wireshark to gain insight into the following areas:

Indications of Compromise and threat recognition for a variety of network attack and exploit scenarios, including reconnaissance techniques, intrusion and exploit methodologies, Botnet threat recognition, as well as standard user protocol vulnerabilities, including many IP-related protocols.

Specialized Network Forensics Analysis techniques, including suspicious data traffic, critical Artifact reconstruction, and viewing

The course uses Real-world examples and multiple hands-on exercises to provide field-proven, practical analysis skills. Attendees receive a student guide including multiple reference files, Networking and forensics tools, and a library of reference documents.

Target Audience:

This workshop is for experienced Networking, Government, and Security personnel who must develop advanced packet investigation techniques by analyzing PCAP-based evidence. Completing this course provides a pathway into Network Forensic Analysis.

Recommended Prerequisites:

WS1 and WS2 or equivalent networking and forensic experience using Wireshark.

This course is suitable for:

Network security professionals
Cybersecurity professionals
Security analysts
SOC analysts
Incident responders
Digital forensic investigators
Network engineers
Network administrators
IT security specialists
Threat hunters
Law enforcement investigators
Intelligence analysts
Government security professionals
Defense and military personnel
Technical investigators

Course Details:

Introduction to Network Forensic Analysis

Network Analysis Methodology

Analyzing Conversations and Activities for Indicators of Compromise (IOC)
Recognizing Suspect Conversations – Analyzing and Reassembling Suspicious User Traffic and Artifacts
Detecting, Analyzing, and Reconstructing Suspicious Activations & Artifacts
Baselines & Sample Libraries
Color Rules, Filtering & Pattern Recognition for Recognition of IOCs of Network Reconnaissance and Intrusions

They Hacked Me – Network Forensics Analysis – Intrusions, Exploits, Etc.

Identifying Target Networks’ Vulnerabilities
Scanning & Reconnaissance Tools, techniques, and identification
You Can Trust Me – Social Engineering
Exploiting the Target – Layer 2 (Physical & Data Link Layers) Exploits
Man-in-the-Middle and MAC / ARP Floods
Exploiting the Target – Layer 3 (Network Layer) Exploits
IPv4 Exploits
IPv6 Tunnel Exploits
ICMPv4/v6 Exploits
Exploiting the Target – Layer 4 (Transport Layer) Exploits
Exploiting TCP Header & Options, Resets, and Flags
Firewall & Intrusion Detection System (IDS) Exploits
Exploiting the Target – Layer 5-7 (Application) Exploits
Drive-by-Downloads
Ransomware, Crimeware, and Malware – Worms & Viruses
Fake Logins & Password Hijacks
Overflows and Internet Exploits
Attacks
Bots, Botnets, Bot Herders
Denial of Service (DoS / DDoS)

Student qoutes

" I found Phill to be the best teacher, and I learn so much from him. Thank you Phill"

- Paul Broyd

Course: TCP/IP Analysis and Troubleshooting with Wireshark

"It's sure the most interesting course that i have followed"

- Karin van der Plas

Course: TCP/IP Analysis and Troubleshooting with Wireshark

"It was a very very very interesting course, and done by the top guy"

- Matthew Steenwijk

Course:

"It was a real pleasure to receive the Wireshark training from a very dedicated trainer"

- Wim de Vries

Course: Voice & Video over IP Network Analysis

"I thought I already knew Wireshark. I was wrong, very wrong"

- Jeroen Valkonet

Course: TCP/IP Analysis and Troubleshooting with Wireshark

"This course is a must have for everyone in IT"

- Johan den Besten

Course: TCP/IP Analysis and Troubleshooting with Wireshark

"Great for network analyses or forensic investigations"

- Sven Schneider

Course: Masterclass – Advanced Network & Intro to Security Analysis

"By far the very best course I ever took"

- Joachim van Doeselaar

Course: TCP/IP Analysis and Troubleshooting with Wireshark

"If there’s a packet, it can be WireSharked!!"

- Elena Petrova

Course: WiFi & Wireless Network Analysis Using Wireshark

"Extremely satisfied with the training. Very helpful instructor and great teaching methods"

- Lars Mikkelsen

Course: Masterclass – Advanced Network & Intro to Security Analysis

More courses within category Security / Forensics

Wireshark Command Line Tools for Troubleshooting

Amsterdam / In-House / Virtual

duration: 5 days

T.B.A.

Network and Forensics Analysis encompasses the skills of capturing data and the ability to discern unusual patterns hidden within seemingly normal network traffic. This course provides the student with an..

SCADA & Industrial Control Systems Analysis & Troubleshooting

Amsterdam / In-House / Virtual

duration: 5 days

T.B.A.

This course is for Networking, Engineering, and Security personnel who need to develop a set of packet investigation techniques through study of the Industrial Control Systems and SCADA networking Protocols..

Cyber Security & Network Forensics Analysis

Amsterdam / In-House / Virtual

duration: 5 days

T.B.A.

Cyber Security & Network Forensics Analysis with Wireshark Network forensics is the process of collecting, analyzing, and interpreting network traffic to determine what happened on a network, how an incident..