Learning Network Forensics: Identify and safeguard your network against both internal and external threats, hackers, and malware attacks

Datt

€8.99 ~~€32.99~~

1.5 (2 Ratings)

eBook Feb 2016 274 pages 1st Edition

Datt

€8.99 ~~€32.99~~

1.5 (2 Ratings)

eBook Feb 2016 274 pages 1st Edition

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

View table of contents

Preview Book

Key benefits

Lay your hands on physical and virtual evidence to understand the sort of crime committed by capturing and analyzing network traffic
Connect the dots by understanding web proxies, firewalls, and routers to close in on your suspect
A hands-on guide to help you solve your case with malware forensic methods and network behaviors

Description

We live in a highly networked world. Every digital device—phone, tablet, or computer is connected to each other, in one way or another. In this new age of connected networks, there is network crime. Network forensics is the brave new frontier of digital investigation and information security professionals to extend their abilities to catch miscreants on the network. The book starts with an introduction to the world of network forensics and investigations. You will begin by getting an understanding of how to gather both physical and virtual evidence, intercepting and analyzing network data, wireless data packets, investigating intrusions, and so on. You will further explore the technology, tools, and investigating methods using malware forensics, network tunneling, and behaviors. By the end of the book, you will gain a complete understanding of how to successfully close a case.

Who is this book for?

If you are a network administrator, system administrator, information security, or forensics professional and wish to learn network forensic to track the intrusions through network-based evidence, then this book is for you. Basic knowledge of Linux and networking concepts is expected.

What you will learn

Understand Internetworking, sources of network-based evidence and other basic technical fundamentals, including the tools that will be used throughout the book
Acquire evidence using traffic acquisition software and know how to manage and handle the evidence
Perform packet analysis by capturing and collecting data, along with content analysis
Locate wireless devices, as well as capturing and analyzing wireless traffic data packets
Implement protocol analysis and content matching; acquire evidence from NIDS/NIPS
Act upon the data and evidence gathered by being able to connect the dots and draw links between various events
Apply logging and interfaces, along with analyzing web proxies and understanding encrypted web traffic
Use IOCs (Indicators of Compromise) and build real-world forensic solutions, dealing with malware

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Frequently bought together

€41.99

€33.99

€41.99

Total € 117.97

Alejandro Castillo Apr 03, 2016

The book is extremely high level to be practical or useful. Take the tunneling chapter for example, in the tunneling chapter, tunneling is only explained. No methods or ideas are ever brought up as to how to detect it or investigate it.The some sections do have tools , but even these sections aren't useful. The author painfully does a step by step process that literally just acts as filler for the book as it fills it with screenshots. I mean who hasn't gone through a click click next next installer?If you are a manager who has just transitioned to the incident response side and want to get your hands wet to understand what your employees are doing this book is for you! For everyone else trying to actually solve this problem on a network with more than one PC and needs a deeper understanding of the subject ... This book may not be for you.

Amazon Verified review

Mr. Kevin J. Ross Mar 09, 2016

I have only read some of this so far in bits and I am not impressed. I got the impression from this book that this book would have good information on the latest methods of analysing complex network data to find bad guys and if you look at the "what you will learn in this book" blurb you will be led to believe this too. However:- The actual content of the book is minimal. Some pages literally have 4 or 5 sentences on it, a picture and then 1/3 to 1/2 the page blank where the content continues on the next page.- Everything I have read feels like a summary that leads no where. It may be common to provide a short description in order to provide the groundwork for coming content but the book feels largely structured like this. For instance in the chapter on tunnelling there is some description on very basic "what is a VPN", what is an SSH tunnel etc and there is nothing really else. It could have gone onto discuss for instance finding DNS tunnelling through abnormal message sizes, frequencies, responses and protocol violations but there is nothing. The IDS chapter is a similar how to install snort on windows (which most networks you will use a *nix OS) and how to run it.- There was very little I saw on actually detecting real attacker techniques. Dissecting exploits on the network, malware command and control, lateral movement etc would have provided excellent content.As such save your money and avoid this even if you are just starting out and looking for an easy introduction (even though the description on the book suggests more would be covered) as you will learn very little applicable knowledge and I have managed to quite a bit of different parts of the book very quickly finding nothing of interest for application to real network defence against modern criminals.Better books would be:Network: Applied Network Security Analysis (proper design, IDS including Suricata, Snort and BRO and analysis, IOC consumption etc), Network Security Through Data Analysis, The Practice of Network Security Monitoring (more if using Security Onion), Network forensics: tracking hackers through cyberspace, Crafting the InfoSec playbook (more queries and concepts. basically where this book should have gone when they started talking about Splunk install of how to install and adding data though a read up on ELK stack and setting that up and you can ingest your IDS and network logs like firewall logs and bro logs into that).Malware & Exploit: Malware Analysts Cookbook, Practical Malware Analysis, Gray Hat hacking 4th edition, Android Malware and analysis etc.

Learning Network Forensics: Identify and safeguard your network against both internal and external threats, hackers, and malware attacks

What do you get with eBook?