-: In this section of the course, 2 2
we're going to cover network forensics 3 3
with a focus on Domain 1 security operations 4 4
and specifically objective 1.3. 5 5
Objective 1.3 states that given a scenario, 6 6
you must be able to use appropriate tools 7 7
or techniques to determine malicious activity. 8 8
Now, as we begin this section, 9 9
we're going to be focused on the different types 10 10
of network forensic tools that you may be using 11 11
as a cybersecurity analyst out in the real world. 12 12
Next, we'll be describing the usage 13 13
of tcpdump and Wireshark for you 14 14
to be able to conduct network forensics 15 15
as well as providing you the short demonstration 16 16
of how to use each of these tools. 17 17
After that, we're going to explore 18 18
the different tools and techniques 19 19
that are used to conduct flow analysis of a network, 20 20
and then we're going to learn 21 21
how to conduct IP address and DNS analysis 22 22
as part of our security monitoring activities, 23 23
as well as how to conduct URL analysis 24 24
as part of those security monitoring activities. 25 25
Next, we're going to head into a demonstration 26 26
where I'm going to show you how to analyze output 27 27
from our network security monitoring tools 28 28
by conducting packet analysis on the data 29 29
that's being sent across the network. 30 30
After all, so many of the attacks 31 31
you're going to be facing on your systems 32 32
are going to come over the network, 33 33
so learning how to identify them 34 34
using these various techniques 35 35
is going to be really helpful, not just for the exam, 36 36
but also for you to be able to identify things 37 37
in your own networks when they're under attack. 38 38
Finally, we're going to take a short quiz 39 39
to see what you learned during this section of the course 40 40
and then we'll review each of those quiz questions fully 41 41
to ensure that you can explain 42 42
why the right answers were right. 43 43
So let's dive into our discussion 44 44
of the concepts surrounding network forensics 45 45
in this section of the course.