Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Free Learning

You're reading from Hands-On Network Forensics Investigate network attacks and find evidence using common network forensic tools

Product type Paperback

Published in Mar 2019

Publisher

ISBN-13 9781789344523

Length 358 pages

Edition 1st Edition

Languages

Tools

Wireshark

Concepts

Forensics

Author (1):

Nipun Jaswal

View More author details

Table of Contents (16) Chapters

Preface

1. Section 1: Obtaining the Evidence FREE CHAPTER

2. Introducing Network Forensics

3. Technical Concepts and Acquiring Evidence

4. Section 2: The Key Concepts

5. Deep Packet Inspection

6. Statistical Flow Analysis

7. Combatting Tunneling and Encryption

8. Section 3: Conducting Network Forensics

9. Investigating Good, Known, and Ugly Malware

10. Investigating C2 Servers

11. Investigating and Analyzing Logs

12. WLAN Forensics

13. Automated Evidence Aggregation and Analysis

14. Other Books You May Enjoy

Leave a review - let other readers know what you think

15. Assessments

Technical requirements

To follow the exercises covered in this chapter, we will require the following:

Wireshark v3.0.0 (https://www.wireshark.org/download.html) installed on Windows 10 OS/ Ubuntu 14.04.
You can download the codes and PCAP files used in this chapter from https://github.com/nipunjaswal/networkforensics/tree/master/Ch8.
VMWare Player/VirtualBox installation with Kali Operating system installed. You can download it from https://www.offensive-security.com/kali-linux-vm-vmware-virtualbox-image-download/.
Python (already installed on Kali Linux).

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Nipun Jaswal

Nipun Jaswal is an international cybersecurity author and an award-winning IT security researcher with more than a decade of experience in penetration testing, Red Team assessments, vulnerability research, RF, and wireless hacking. He is presently the Director of Cybersecurity Practices at BDO India. Nipun has trained and worked with multiple law enforcement agencies on vulnerability research and exploit development. He has also authored numerous articles and exploits that can be found on popular security databases, such as PacketStorm and exploit-db. Please feel free to contact him at @nipunjaswal.

See other products by Nipun Jaswal