What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Introducing Network Forensics

Network forensics is one of the sub-branches of digital forensics where the data being analyzed is the network traffic going to and from the system under observation. The purposes of this type of observation are collecting information, obtaining legal evidence, establishing a root-cause analysis of an event, analyzing malware behavior, and so on. Professionals familiar with digital forensics and incident response (DFIR) know that even the most careful suspects leave traces and artifacts behind. But forensics generally also includes imaging the systems for memory and hard drives, which can be analyzed later. So, how do network forensics come into the picture? Why do we need to perform network forensics at all? Well, the answer to this question is relatively simple.

Let's consider a scenario where you are hunting for some unknown attackers in a...

Key benefits

Investigate network threats with ease

Practice forensics tasks such as intrusion detection, network analysis, and scanning

Learn forensics investigation at the network level

Description

Network forensics is a subset of digital forensics that deals with network attacks and their investigation. In the era of network attacks and malware threat, it’s now more important than ever to have skills to investigate network attacks and vulnerabilities. Hands-On Network Forensics starts with the core concepts within network forensics, including coding, networking, forensics tools, and methodologies for forensic investigations. You’ll then explore the tools used for network forensics, followed by understanding how to apply those tools to a PCAP file and write the accompanying report. In addition to this, you will understand how statistical flow analysis, network enumeration, tunneling and encryption, and malware detection can be used to investigate your network. Towards the end of this book, you will discover how network correlation works and how to bring all the information from different types of network devices together. By the end of this book, you will have gained hands-on experience of performing forensics analysis tasks.

Who is this book for?

The book targets incident responders, network engineers, analysts, forensic engineers and network administrators who want to extend their knowledge from the surface to the deep levels of understanding the science behind network protocols, critical indicators in an incident and conducting a forensic search over the wire.

What you will learn

Discover and interpret encrypted traffic

Learn about various protocols

Understand the malware language over wire

Gain insights into the most widely used malware

Correlate data collected from attacks

Develop tools and custom scripts for network forensics automation

What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

$59.99

$43.99

$54.99

Total $ 158.97

Filter reviews by

All

Packt verified reviews

Amazon verified reviews

Andre Feb 13, 2024

Downloading this book triggered my AV. Somebody from Packt should check this out and confirm that they are not distributing Trojans

Subscriber review

Dexter Oct 11, 2023

Noon keylooger exercise FTP Server is nolonger valid

Sam Marc Dec 21, 2021

Good

Amazon Verified review

Anon Feb 16, 2021

This book was a total disappointment. It is a collection of PCAP-based exercises with no real insight. In most cases, you are given a PCAP file containing traces of an attack, and you just examine some fields with Wireshark, and that's it. I didn't learn anything. The chapter on WiFi security was a total waste of time as it didn't contain anything you could find on even a basic student's blog. I would ask the editor to check the quality of the manuscripts they accept for publication, as I'm surprised they allowed a book with such low-quality figures to be sold under their name.

Dave Oct 22, 2020

Wow! Into the 'long grass’. Had to do some extra learning to keep up with this how to .

Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools

What do you get with Print?

Hands-On Network Forensics

Introducing Network Forensics

Technical requirements

Network forensics investigation methodology

Source of network evidence

Tapping the wire and the air

Wireshark essentials

Exercise 1 – a noob's keylogger

Exercise 2 – two too many

Summary

Questions and exercises

Further reading

Page 1 of 10

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Print?

Product Details

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs

Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools

What do you get with Print?

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Print?

Product Details

Packt Subscriptions

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs