Learning Network Forensics: Identify and safeguard your network against both internal and external threats, hackers, and malware attacks

Datt

$54.99

1.5 (2 Ratings)

Paperback Feb 2016 274 pages 1st Edition

Datt

$54.99

1.5 (2 Ratings)

Paperback Feb 2016 274 pages 1st Edition

What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

View table of contents

Preview Book

Key benefits

Lay your hands on physical and virtual evidence to understand the sort of crime committed by capturing and analyzing network traffic
Connect the dots by understanding web proxies, firewalls, and routers to close in on your suspect
A hands-on guide to help you solve your case with malware forensic methods and network behaviors

Description

We live in a highly networked world. Every digital device—phone, tablet, or computer is connected to each other, in one way or another. In this new age of connected networks, there is network crime. Network forensics is the brave new frontier of digital investigation and information security professionals to extend their abilities to catch miscreants on the network. The book starts with an introduction to the world of network forensics and investigations. You will begin by getting an understanding of how to gather both physical and virtual evidence, intercepting and analyzing network data, wireless data packets, investigating intrusions, and so on. You will further explore the technology, tools, and investigating methods using malware forensics, network tunneling, and behaviors. By the end of the book, you will gain a complete understanding of how to successfully close a case.

Who is this book for?

If you are a network administrator, system administrator, information security, or forensics professional and wish to learn network forensic to track the intrusions through network-based evidence, then this book is for you. Basic knowledge of Linux and networking concepts is expected.

What you will learn

Understand Internetworking, sources of network-based evidence and other basic technical fundamentals, including the tools that will be used throughout the book
Acquire evidence using traffic acquisition software and know how to manage and handle the evidence
Perform packet analysis by capturing and collecting data, along with content analysis
Locate wireless devices, as well as capturing and analyzing wireless traffic data packets
Implement protocol analysis and content matching; acquire evidence from NIDS/NIPS
Act upon the data and evidence gathered by being able to connect the dots and draw links between various events
Apply logging and interfaces, along with analyzing web proxies and understanding encrypted web traffic
Use IOCs (Indicators of Compromise) and build real-world forensic solutions, dealing with malware

Estimated delivery fee Deliver to United States

Economy delivery 10 - 13 business days

Free ~~$6.95~~

Premium delivery 6 - 9 business days

$21.95

(Includes tracking information)

What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Frequently bought together

$54.99

$44.99

$54.99

Total $ 154.97

FAQs

What is the delivery time and cost of print book?

Shipping Details

USA:

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.

Unfortunately, due to several restrictions, we are unable to ship to the following countries:

Afghanistan
American Samoa
Belarus
Brunei Darussalam
Central African Republic
The Democratic Republic of Congo
Eritrea
Guinea-bissau
Iran
Lebanon
Libiya Arab Jamahriya
Somalia
Sudan
Russian Federation
Syrian Arab Republic
Ukraine
Venezuela

What is custom duty/charge?

Customs duty are charges levied on goods when they cross international borders. It is a tax that is imposed on imported goods. These duties are charged by special authorities and bodies created by local governments and are meant to protect local industries, economies, and businesses.

Do I have to pay customs charges for the print book order?

The orders shipped to the countries that are listed under EU27 will not bear custom charges. They are paid by Packt as part of the order.

List of EU27 countries: www.gov.uk/eu-eea:

A custom duty or localized taxes may be applicable on the shipment and would be charged by the recipient country outside of the EU27 which should be paid by the customer and these duties are not included in the shipping charges been charged on the order.

How do I know my custom duty charges?

The amount of duty payable varies greatly depending on the imported goods, the country of origin and several other factors like the total invoice amount or dimensions like weight, and other such criteria applicable in your country.

For example:

If you live in Mexico, and the declared value of your ordered items is over $ 50, for you to receive a package, you will have to pay additional import tax of 19% which will be $ 9.50 to the courier service.
Whereas if you live in Turkey, and the declared value of your ordered items is over € 22, for you to receive a package, you will have to pay additional import tax of 18% which will be € 3.96 to the courier service.

How can I cancel my order?

Cancellation Policy for Published Printed Books:

You can cancel any order within 1 hour of placing the order. Simply contact customercare@packt.com with your order details or payment transaction id. If your order has already started the shipment process, we will do our best to stop it. However, if it is already on the way to you then when you receive it, you can contact us at customercare@packt.com using the returns and refund process.

Please understand that Packt Publishing cannot provide refunds or cancel any order except for the cases described in our Return Policy (i.e. Packt Publishing agrees to replace your printed book because it arrives damaged or material defect in book), Packt Publishing will not accept returns.

What is your returns and refunds policy?

Return Policy:

We want you to be happy with your purchase from Packtpub.com. We will not hassle you with returning print books to us. If the print book you receive from us is incorrect, damaged, doesn't work or is unacceptably late, please contact Customer Relations Team on customercare@packt.com with the order number and issue details as explained below:

If you ordered (eBook, Video or Print Book) incorrectly or accidentally, please contact Customer Relations Team on customercare@packt.com within one hour of placing the order and we will replace/refund you the item cost.
Sadly, if your eBook or Video file is faulty or a fault occurs during the eBook or Video being made available to you, i.e. during download then you should contact Customer Relations Team within 14 days of purchase on customercare@packt.com who will be able to resolve this issue for you.
You will have a choice of replacement or refund of the problem items.(damaged, defective or incorrect)
Once Customer Care Team confirms that you will be refunded, you should receive the refund within 10 to 12 working days.
If you are only requesting a refund of one book from a multiple order, then we will refund you the appropriate single item.
Where the items were shipped under a free shipping offer, there will be no shipping costs to refund.

On the off chance your printed book arrives damaged, with book material defect, contact our Customer Relation Team on customercare@packt.com within 14 days of receipt of the book with appropriate evidence of damage and we will work with you to secure a replacement copy, if necessary. Please note that each printed book you order from us is individually made by Packt's professional book-printing partner which is on a print-on-demand basis.

What tax is charged?

Currently, no tax is charged on the purchase of any print book (subject to change based on the laws and regulations). A localized VAT fee is charged only to our European and UK customers on eBooks, Video and subscriptions that they buy. GST is charged to Indian customers for eBooks and video purchases.

What payment methods can I use?

You can pay with the following card types:

Visa Debit
Visa Credit
MasterCard
PayPal

What is the delivery time and cost of print books?

Shipping Details

USA:

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Unfortunately, due to several restrictions, we are unable to ship to the following countries:

Afghanistan
American Samoa
Belarus
Brunei Darussalam
Central African Republic
The Democratic Republic of Congo
Eritrea
Guinea-bissau
Iran
Lebanon
Libiya Arab Jamahriya
Somalia
Sudan
Russian Federation
Syrian Arab Republic
Ukraine
Venezuela

Alejandro Castillo Apr 03, 2016

The book is extremely high level to be practical or useful. Take the tunneling chapter for example, in the tunneling chapter, tunneling is only explained. No methods or ideas are ever brought up as to how to detect it or investigate it.The some sections do have tools , but even these sections aren't useful. The author painfully does a step by step process that literally just acts as filler for the book as it fills it with screenshots. I mean who hasn't gone through a click click next next installer?If you are a manager who has just transitioned to the incident response side and want to get your hands wet to understand what your employees are doing this book is for you! For everyone else trying to actually solve this problem on a network with more than one PC and needs a deeper understanding of the subject ... This book may not be for you.

Amazon Verified review

Mr. Kevin J. Ross Mar 09, 2016

I have only read some of this so far in bits and I am not impressed. I got the impression from this book that this book would have good information on the latest methods of analysing complex network data to find bad guys and if you look at the "what you will learn in this book" blurb you will be led to believe this too. However:- The actual content of the book is minimal. Some pages literally have 4 or 5 sentences on it, a picture and then 1/3 to 1/2 the page blank where the content continues on the next page.- Everything I have read feels like a summary that leads no where. It may be common to provide a short description in order to provide the groundwork for coming content but the book feels largely structured like this. For instance in the chapter on tunnelling there is some description on very basic "what is a VPN", what is an SSH tunnel etc and there is nothing really else. It could have gone onto discuss for instance finding DNS tunnelling through abnormal message sizes, frequencies, responses and protocol violations but there is nothing. The IDS chapter is a similar how to install snort on windows (which most networks you will use a *nix OS) and how to run it.- There was very little I saw on actually detecting real attacker techniques. Dissecting exploits on the network, malware command and control, lateral movement etc would have provided excellent content.As such save your money and avoid this even if you are just starting out and looking for an easy introduction (even though the description on the book suggests more would be covered) as you will learn very little applicable knowledge and I have managed to quite a bit of different parts of the book very quickly finding nothing of interest for application to real network defence against modern criminals.Better books would be:Network: Applied Network Security Analysis (proper design, IDS including Suricata, Snort and BRO and analysis, IOC consumption etc), Network Security Through Data Analysis, The Practice of Network Security Monitoring (more if using Security Onion), Network forensics: tracking hackers through cyberspace, Crafting the InfoSec playbook (more queries and concepts. basically where this book should have gone when they started talking about Splunk install of how to install and adding data though a read up on ELK stack and setting that up and you can ingest your IDS and network logs like firewall logs and bro logs into that).Malware & Exploit: Malware Analysts Cookbook, Practical Malware Analysis, Gray Hat hacking 4th edition, Android Malware and analysis etc.

Learning Network Forensics: Identify and safeguard your network against both internal and external threats, hackers, and malware attacks

What do you get with Print?