Kniha Tactical Wireshark Kevin Cardwell

Tactical Wireshark

A Deep Dive into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence

Jazyk: Angličtina
Vazba: Brožovaná
Vydavatel: Springer, Berlin
Dostupnost: Skladem u dodavatele
Odesíláme za 14-21 dnů
1 075
This book teaches a systematic approach that has been proven effective at identifying intrusions tha...

Informace o knize

Jazyk
Angličtina
Vazba
Kniha - Brožovaná
Vydáno
2023
Stránek
462
EAN
9781484292907
Enbook ID
42849245
Vydavatel
Hmotnost
890
Rozměry
178 x 254

Kompletní popis

This book teaches a systematic approach that has been proven effective at identifying intrusions that range from the most basic to the most sophisticated, advanced attacks using Wireshark.This approach will show you how to manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.Next, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial "click" through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.In the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.What You Will LearnUse Wireshark to identify intrusions into a networkExercise methods to uncover network data even when it is in encrypted formAnalyze malware Command and Control (C2) communications and identify IOCsExtract data in a forensically sound manner to support investigationsLeverage capture file statistics to reconstruct network eventsWho This Book Is ForNetwork analysts, Wireshark analysts, and digital forensic analysts.

Mohlo by vás zajímat

Wireshark for Network Forensics

Nagendra Kumar Nainar
927
831

Child vs. State

Janet W. Steverson
1 618
699

Judo Advantage

Steve Scott
308
2 457

Way Home

Kay Brellend
135

Traces of Trauma

David P. Chandler
676

Saint Peter's College

Joseph McLaughlin
292

Currents of Space

Isaac Asimov
237

The Last Supper

Charles Harvey
243

Hidden Things

E.S. Cuny
290
331
769
1 381

Zákaznicí kteří koupili tuto knihu koupili také

2 017
273
165