Network Forensics and Incident Response – Antisyphon

Network Forensics and Incident Response – Antisyphon
English | Tutorial | Size: 11.2 GB

Incident responders are continually faced with the challenge of collecting and analyzing relevant event data-network communications is no exception. This course uses an assortment of network data acquisition tools and techniques with a focus on open-source, vendor-neutral solutions. Students who take this course will learn how to perform network traffic and protocol analysis that ultimately supports cybersecurity incident response efforts. From reconnaissance to data exfiltration, network traffic scales to provide a bird’s-eye view of attacker activity. Leveraging the vantage point of key network traffic chokepoints, this course explores nearly every phase of an attacker’s methodology. Students will learn network traffic analysis concepts and work through hands-on lab exercises that reinforce the course material using real-world attack scenarios.
Key Takeaways

Learn fundamental concepts of incident handling and response
Gain insight into attacker methodologies and learn various techniques to uncover adversarial activity
Learn how to detect network protocol abuse against common protocols found in enterprise environments
Students will get hands-on experience:
Analyzing network packet captures with a variety of tools, techniques, and filtering options
Extracting files and metadata from network packet captures
Creating custom Zeek scripts to support incident response efforts
Creating custom Zeek scripts for Zeek log enrichment
Analyzing network flow data
Real-world attack scenarios and techniques for response
Methods to aid investigators when dealing with the challenges of encrypted communications
A culminating CTF challenge combining all course learning objectives

Network Forensics and Incident Response by antisyphontraining
Labs and video + slides

NITROFLARE
nitroflare.com/view/DD2C3E41D43C4F8/Network_Forensics_and_Incident_Response_-_Antisyphon.part01.rar
nitroflare.com/view/232399F3E78F01F/Network_Forensics_and_Incident_Response_-_Antisyphon.part02.rar
nitroflare.com/view/AA2DA4FFBA28136/Network_Forensics_and_Incident_Response_-_Antisyphon.part03.rar
nitroflare.com/view/12236B8B085EDCA/Network_Forensics_and_Incident_Response_-_Antisyphon.part04.rar
nitroflare.com/view/C8B536972080E6A/Network_Forensics_and_Incident_Response_-_Antisyphon.part05.rar
nitroflare.com/view/EC656DB2CFFDD7E/Network_Forensics_and_Incident_Response_-_Antisyphon.part06.rar
nitroflare.com/view/3F7E4CCEF1E16C0/Network_Forensics_and_Incident_Response_-_Antisyphon.part07.rar
nitroflare.com/view/129CC923D34C39A/Network_Forensics_and_Incident_Response_-_Antisyphon.part08.rar
nitroflare.com/view/43E6282639F2B02/Network_Forensics_and_Incident_Response_-_Antisyphon.part09.rar
nitroflare.com/view/56DEEB298CFF2B0/Network_Forensics_and_Incident_Response_-_Antisyphon.part10.rar
nitroflare.com/view/D9645ED7B62B60F/Network_Forensics_and_Incident_Response_-_Antisyphon.part11.rar
nitroflare.com/view/6C189BA7E3B1648/Network_Forensics_and_Incident_Response_-_Antisyphon.part12.rar
nitroflare.com/view/88F7BE10BB7F593/Network_Forensics_and_Incident_Response_-_Antisyphon.part13.rar
nitroflare.com/view/05C0A3758B56669/Network_Forensics_and_Incident_Response_-_Antisyphon.part14.rar
nitroflare.com/view/B65FCACA99CB5A9/Network_Forensics_and_Incident_Response_-_Antisyphon.part15.rar
nitroflare.com/view/7F338EE166CC2B7/Network_Forensics_and_Incident_Response_-_Antisyphon.part16.rar
nitroflare.com/view/3E9F37B7EBE7926/Network_Forensics_and_Incident_Response_-_Antisyphon.part17.rar