Andere Kunden interessierten sich auch für
![Wireshark for Network Forensics]( "Wireshark for Network Forensics")
Wireshark for Network Forensics44,99 €![Wireshark Fundamentals]( "Wireshark Fundamentals")
Wireshark Fundamentals38,99 €![Detection of Intrusions and Malware, and Vulnerability Assessment]( "Detection of Intrusions and Malware, and Vulnerability Assessment")
Detection of Intrusions and Malware, and Vulnerability Assessment49,99 €![Local attacks on Windows domain networks]( "Local attacks on Windows domain networks")
Local attacks on Windows domain networks26,99 €![Cybersecurity Incident Response]( "Cybersecurity Incident Response")
Cybersecurity Incident Response44,99 €![Troubleshooting SharePoint]( "Troubleshooting SharePoint")
Troubleshooting SharePoint44,99 €![Oracle Incident Response and Forensics]( "Oracle Incident Response and Forensics")
Oracle Incident Response and Forensics21,99 €
Take a systematic approach at identifying intrusions that range from the most basic to the most sophisticated, using Wireshark, an open source protocol analyzer. This book will show you how to effectively manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.
Next, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial "click" through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.
In the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.
After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.
What You Will Learn
Use Wireshark to identify intrusions into a networkExercise methods to uncover network data even when it is in encrypted formAnalyze malware Command and Control (C2) communications and identify IOCsExtract data in a forensically sound manner to support investigationsLeverage capture file statistics to reconstruct network events
Who This Book Is ForNetwork analysts, Wireshark analysts, and digital forensic analysts.
Next, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial "click" through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.
In the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.
After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.
What You Will Learn
Use Wireshark to identify intrusions into a networkExercise methods to uncover network data even when it is in encrypted formAnalyze malware Command and Control (C2) communications and identify IOCsExtract data in a forensically sound manner to support investigationsLeverage capture file statistics to reconstruct network events
Who This Book Is ForNetwork analysts, Wireshark analysts, and digital forensic analysts.