Give a knowledge of the information what can be acquired from the network and get the skills to use tools for network forensic.
learning outcomes of the subject in Eng.
Understands network structure and understands network protocols
Can collect information from network and design collection systems
Can extract relevant information from network capture files and proxy caches and can automate process to certain level
Can incorporate log and network data to analytic and timeline building process
Understands legal implications of network data collection and analysis.
Typical network protocols and data that can be collected from network. Network data formats tcpdump, pcap, netflow.
Free and commercial tools for network data analysis.
Wireless network data collection and forensics.
IPS/IDS usage for data analysis automation, logging optimisation, OPSEC,
footprint, encryption, and protocol reversing.