NET-FORENSIC.AW1
Mastering Network Forensics
Develop the skills to investigate cybercrimes, from identifying threats to recovering evidence.
- Practice in 15 Praktische Übungen — nothing to install
- 15 Interaktive Lektionen Und 90 topics mapped to the official exam objectives
- 155 Testfragen zur Praxis
Expert Selbstgesteuert · 1 Jahr Zugang
15 Praktische LiveLabs
Practice real IT tasks in guided environments.
- Reale Umgebungen
- Automatisch bewertet
- Keine Installation
15Interaktive Lektionen
90Topics
15LiveLab
155Testfragen zur Praxis
50Karteikarten
50Glossar der Begriffe
01 / Fähigkeiten, die Sie erwerben
What you will be able to do
Try Free →
Keine Kreditkarte benötigt
This network forensics course will equip you with the skills and tools to become a top-tier cybersecurity professional.You’ll learn to decode digital mysteries, dissect suspicious traffic, uncover covert channels, and analyze cyberattacks like ransomware and protocol misuse. Mastering tools like Wireshark, Splunk, and MitmProxy while unraveling threats from email servers to exploit kits will become interactive! You’ll gain sharp skills in log analysis, packet inspection, malware tracking, and more – all thanks to our risk-free hands-on labs. So, if cybercrime leaves a trail, you’ll be the one following it – straight to the source.
- Analyze network traffic and packet structures for suspicious activities.
- Investigate cyberattacks, including ransomware, DDoS, and web server attacks.
- Decrypt SSL/TLS communication to detect hidden threats.
- Identify covert communication channels and misuse of DNS protocols.
- Examine logs from SSh, proxy servers, and email authentication for anomalies.
- Detect wireless attacks and monitor radio frequencies.
- Simulate network environments to study exploit kits and malicious payloads.
- Track malware activities through reverse engineering and memory forensics.
- Automate forensic tasks like IP reputation analysis and protocol dissection with tools like Lua.
- Utilize forensic tools such as Wireshark, Splunk, and MitmProxy for in-depth investigations.
- Identify and remove ransomware and capture decryption keys.
- Explore command-and-control systems to uncover attackers' methods.
- Develop proactive network defense strategies using forensic insights.
Course Highlights
-
15 Strukturierte Lektionen Umfassende Abdeckung der zentralen Kursziele
-
15 Praktische LiveLabs Interaktive, geführte Szenarien mit sofortiger Auswertung
-
155 Übungsfragen Bewertungstests mit ausführlichen Antwortbegründungen
-
1 Jahr voller Zugang Selbstgesteuertes Lernen, jederzeit auf allen Geräten zugänglich
02 / Lektionen & Labore
See exactly what you will learn and practice
Unterrichtsplan
15 Interaktive Lektionen · 90 topics01 Introduction +
02 Foundations of Network Forensics 6 topics · 2 LiveLab +
- Introduction
- Types of network forensics
- Setting up the environment for analysis
- Case study: Suspicious Web Server
- Conclusion
- Long questions
2 LiveLab in this lesson — see the labs panel →
03 Protocols and Deep Packet Analysis 9 topics · 1 LiveLab +
- Introduction
- The OSI model
- The TCP/IP model
- The Packet structure
- Case study: Curious case of protocol misuse
- Deep Packet Inspection
- Case study: Investigating Distributed Denial of service attacks
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
04 Flow Analysis versus Packet Analysis 8 topics · 2 LiveLab +
- Introduction
- Statistical Flow analysis
- Flow Record and FRP Systems
- Uniflow and BitFlow
- Types of Sensor deployment
- Flow analysis
- Conclusion
- Long questions
2 LiveLab in this lesson — see the labs panel →
05 Conducting Log Analysis 6 topics · 1 LiveLab +
- Introduction
- Investigating Remote Login attempts on SSH
- Investigating Web Server Attacks with Splunk
- Investigating Proxy Logs
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
06 Wireless Forensics 7 topics +
- Introduction
- Basics of Radio Frequency Monitoring
- The 802.11 standard
- Evidence types in wireless local area networking
- Other wireless attacks and their analysis
- Conclusion
- Long questions
07 TLS Decryption and Visibility 5 topics · 1 LiveLab +
- Introduction
- Techniques to decrypt SSL/TLS communication
- Examining SSL/TLS traffic using proxy
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
08 Demystifying Covert Channels 8 topics · 2 LiveLab +
- Introduction
- Identifying covert communication using proxies
- Using MitmProxy to decrypt Dropbox traffic
- Using Dropbox API to gather attack details
- Uncovering the attack pattern
- Uncovering DNS misuse
- Conclusion
- Long questions
2 LiveLab in this lesson — see the labs panel →
09 Analyzing Exploit Kits 8 topics +
- Introduction
- How exploit kits work
- Analysis of an exploit kit infection
- Network forensics with Security Onion
- Extracting malicious payload
- Using Fakenet-Ng to simulate a network
- Conclusion
- Long questions
10 Automating Network Forensics 6 topics · 1 LiveLab +
- Introduction
- Parsing the Syslog format
- IP reputation analysis
- Writing dissectors for protocols in Lua
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
11 Backtracking Malware 5 topics · 2 LiveLab +
- Introduction
- Investigating Cobalt Strike Encrypted traffic
- Investigating TeamViewer and AnyDesk
- Conclusion
- Long questions
2 LiveLab in this lesson — see the labs panel →
12 Investigating Ransomware Attacks 7 topics · 1 LiveLab +
- Introduction
- Analysis of WannaCry ransomware
- Capturing ransomware keys for decryption
- Analyzing GandCrab ransomware
- Case Study: REVIL ransomware at a Bank
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
13 Investigating Command and Control Systems 6 topics · 1 LiveLab +
- Introduction
- Investigating Metasploit Reverse Shell
- Investigating Meterpreter Reverse Shell
- Investigating Meterpreter Stageless Reverse Shell
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
14 Investigating Attacks on Email Servers 5 topics · 1 LiveLab +
- Introduction
- Analysis of ProxyLogon attack
- Investigating Email authentication logs
- Conclusion
- Long questions
1 LiveLab in this lesson — see the labs panel →
15 Investigating Web Server Attacks 4 topics +
- Introduction
- Web Server attack analysis
- Conclusion
- Long questions
Praktische Übungen Our edge
15 LiveLabs- Capturing Network Packets Using TCPDump
- Performing Network Analysis Using Wireshark
- Using tshark to Filter Data from a PCAP File
- Generating IPFIX from PCAP
- Analyzing SiLK Flow Records
- Investigating SSH Logs
- Capturing Browser Requests Using mitmproxy
- Resolving IP Addresses for Network Analysis
- Investigating DNS Misuse
- Performing IP Reputation Analysis
- Monitoring a TeamViewer Session
- Investigating AnyDesk Sessions
- Analyzing the WannaCry Ransomware Attack
- Investigating the Metasploit Reverse Shell
- Investigating the ProxyLogon Attack
Labore laufen direkt im Browser — nichts zu installieren.
03 / FAQS
Fragen, bevor Sie beginnen
What is network forensics?+
Network forensics involves analyzing network traffic and logs to detect, investigate, and prevent cyberattacks.
Who should take this course?+
This online network forensics course is ideal for
- IT professionals
- Network Forensics Analyst
- Cybersecurity Analyst
- Digital Forensics Investigator
- Incident Response Specialist
- Security Operations Center (SOC) Analyst
And for anyone interested in the cybersecurity field
What are the prerequisites for this course?+
A basic understanding of computer networks and cybersecurity concepts is recommended.
What tools will I learn to use in this course?+
In this online network forensics course, you will work with tools like Wireshark, Splunk, MitmProxy, Security Onion, Fakenet-Ng, and more.
How can network forensics skills benefit my career?+
Network forensics skills are in demand across many industries. This network forensics training will significantly boost your career by influencing your earning potential, building a case for promotions, and opening up networking opportunities for you.
Keep going
You might also like
Master Network Investigations
Learn to analyze traffic, decrypt data, and detect covert channels like a pro!
- 1 Jahr voller Zugang
- 15 LiveLab enthalten
- Abschlusszertifikat
Keine Kreditkarte benötigt