In Cybersecurity Investigations and Network Forensics Analysis training course, you will develop the skills not only to capture suspicious data, but also to discern unusual patterns hidden within seemingly normal network traffic. You will gain a set of investigative techniques focused on the use of vendor-neutral, open source tools to provide insight into:
- Forensics analysis fundamentals
- Data recorder technology and data mining
- Network security principles, including encryption technologies and defensive configurations of network infrastructure devices
- Security threat recognition for a variety of common network attack and exploit scenarios, including network reconnaissance techniques, Bot-Net threat recognition, and man-in-the-middle attacks, and common user protocol vulnerabilities, such as IP-related protocols (IP/TCP, DNS, ARP, ICMP), e-mail protocols (POP/SMTP/IMAP), and other common Internet-based user protocols
- Open source network forensics tools
- Specialized network forensics analysis techniques, including suspicious data traffic reconstruction and viewing techniques
Throughout the course, real-world examples in conjunction with numerous hands-on exercises will provide practical forensics analysis skills.
By attending Cybersecurity Investigations and Network Forensics Analysis workshop, delegates will learn:
- Principles of network forensics analysis and how to apply them
- Configure various open source tools for network forensics analysis
- Utilize tools to recognize traffic patterns associated with suspicious network behavior
- Reconstruct suspicious activities such as e-mails, file transfers, or web browsing for detailed analysis and evidentiary purposes
- Recognize potential network security infrastructure misconfigurations
- Familiarity with TCP/IP networking and basic network infrastructure devices such as switches, routers, etc.
- Attend a training on Cybersecurity Essentials or possess equivalent knowledge
- Troubleshooting TCP/IP Networks with Wireshark
This Cybersecurity Investigations and Network Forensics Analysis class is meant for:
- Network engineers, network security professionals, who possess basic- to intermediate-level general security and networking knowledge
- Personnel who have working knowledge of host-based forensics analysis and want to gain expertise in the end-to-end digital forensics process