Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Hands-On Network Forensics

You're reading from   Hands-On Network Forensics Investigate network attacks and find evidence using common network forensic tools

Arrow left icon
Product type Paperback
Published in Mar 2019
Publisher
ISBN-13 9781789344523
Length 358 pages
Edition 1st Edition
Languages
Concepts
Arrow right icon
Author (1):
Arrow left icon
Nipun Jaswal Nipun Jaswal
Author Profile Icon Nipun Jaswal
Nipun Jaswal
Arrow right icon
View More author details
Toc

Table of Contents (16) Chapters Close

Preface 1. Section 1: Obtaining the Evidence FREE CHAPTER
2. Introducing Network Forensics 3. Technical Concepts and Acquiring Evidence 4. Section 2: The Key Concepts
5. Deep Packet Inspection 6. Statistical Flow Analysis 7. Combatting Tunneling and Encryption 8. Section 3: Conducting Network Forensics
9. Investigating Good, Known, and Ugly Malware 10. Investigating C2 Servers 11. Investigating and Analyzing Logs 12. WLAN Forensics 13. Automated Evidence Aggregation and Analysis 14. Other Books You May Enjoy 15. Assessments

Decrypting TLS using browsers

One of the hidden features of the popular Chrome browser is the support of logging the symmetric session key used while encrypting the traffic with TLS to a file of our choice. Let's see what happens when we try to capture a TLS-encrypted packet:

We can see that the network traffic is encrypted using TLS and that the data in the bottom pane is not making much sense to us. Fortunately, browsers such as Chrome support storing the TLS key, which can help us decrypt the data that otherwise is not making sense. To set up logging, we need to export a user environment variable by browsing the Control Panel and opening system.

Next, we need to choose Advanced system settings. In the next step, we will choose the Environment Variables... option. In the User variable section, we will add the SSLKEYLOGFILE variable by clicking New and then set...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image