Tactical Wireshark: A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence


Tactical Wireshark: A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence 1st ed. Edition
by Kevin Cardwell(Author)
Publisher Finelybook 出版社: Apress; 1st ed. edition (April 13, 2023)
Language 语言: English
pages 页数: 477 pages
ISBN-10 书号: 1484292901
ISBN-13 书号: 9781484292907


Book Description
Take a systematic approach at identifying intrusions that range from the most basic to the most sophisticated, using Wireshark, an open source protocol analyzer. This book will show you how to effectively manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.
Next, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial “click” through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.
In the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.
After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.

What you will learn
Use Wireshark to identify intrusions into a network
Exercise methods to uncover network data even when it is in encrypted form
Analyze malware Command and Control (C2) communications and identify IOCs
Extract data in a forensically sound manner to support investigations
Leverage capture file statistics to reconstruct network events

Who this book is forNetwork analysts, Wireshark analysts, and digital forensic analysts.

打赏
未经允许不得转载:finelybook » Tactical Wireshark: A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence

相关推荐

  • 暂无文章

觉得文章有用就打赏一下

您的打赏,我们将继续给力更多优质内容

支付宝扫一扫打赏

微信扫一扫打赏