Téléchargez le livre : Tactical Wireshark

Tactical Wireshark

A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence de

Éditeur :

Apress


Paru le : 2023-04-13

eBook Téléchargement , DRM LCP 🛈 DRM Adobe 🛈
Lecture en ligne (streaming)
62,11 €
Téléchargement immédiat
Dès validation de votre commande
Image Louise Reader présentation

Louise Reader

Lisez ce titre sur l'application Louise Reader.

badge apple Application Louise Reader
badge Android Application Louise Reader
Description

Take a systematic approach at identifying intrusions that range from the most basic to the most sophisticated, using Wireshark, an open source protocol analyzer. This book will show you how to effectively manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.
Next, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial “click” through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.
In the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation. After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.
What You Will Learn

Use Wireshark to identify intrusions into a networkExercise methods to uncover network data even when it is in encrypted formAnalyze malware Command and Control (C2) communications and identify IOCsExtract data in a forensically sound manner to support investigationsLeverage capture file statistics to reconstruct network events
Who This Book Is For
Network analysts, Wireshark analysts, and digital forensic analysts.
Pages
462 pages
Collection
n.c
Parution
2023-04-13
Marque
Apress
EAN papier
9781484292907
EAN PDF
9781484292914
Informations sur l'ebook
Nombre pages copiables
4
Nombre pages imprimables
46
Taille du fichier
71680 Ko
Prix
62,11 €
EAN EPUB
9781484292914
Informations sur l'ebook
Nombre pages copiables
4
Nombre pages imprimables
46
Taille du fichier
83732 Ko
Prix
62,11 €

Suggestions personnalisées