Network Traffic Analysis for Incident Response by InfoSec
11h 38mIntermediate2025-09-05
Authors
Infosec Institute
Course details
Explore essential tools and techniques for handling network security. Unlock the potential of Wireshark to garner insights into traffic patterns and threats. Investigate common network threats in-depth, such as data exfiltration and multistage malware, following practical case studies. Discover how to effectively collect and analyze network traffic data using various methods like statistical and event-based analysis. Equip yourself with skills in network monitoring and intelligence collection for enhanced threat detection and response. This course is an ideal fit for security engineers, network administrators, cybersecurity analysts, and anyone looking to enhance their cybersecurity skill set.
Concepts
Introduction
- Welcome
Introduction to Network Traffic Analysis
- Introduction to network traffic analysis
Fundmentals of Networking
- Fundamentals of networking
Hands-On Traffic Analysis in Wireshark
- Introduction to Wireshark
- Features of Wireshark
- IP demo
- TCP demo
- UDP demo
- ICMP demo
- ARP demo
- DNS demo
- FTP demo
- HTTP demo
- IRC demo
- SMTP demo
- SSH demo
- TFTP demo
Alternatives to Wireshark
- Network Mapper demo
- Termshark demo
- CloudShark demo
Network Traffic Intelligence Collection
- Intelligence collection
- Network mapping demo
- Content deobfuscation demo
- Credential capture demo
- TLS decryption demo
- Web proxy demo
- Internet resources demo, part 1
- Internet resources demo, part 2
Common Network Threats
- Introduction to threat analysis
- Scanning demo
- Data exfiltration demo
- DDoS attack demo
- IoT attack demo
Traffic Analysis Case Studies
- Remote access trojan (RAT) demo
- Fileless malware demo
- Network worm demo
- Multistage malware demo
Data Collection for Network Traffic Analysis
- Introduction to network data collection
- Monitoring appliance deployment
- Virtualization for network traffic analysis
- Deceptive technologies for network traffic analysis
Data Analysis for Network Traffic Analysis
- Introduction to network data analysis
- Tools for data analysis
- Scapy demo
- Data analysis techniques
- Connection analysis
- Statistical analysis
- Event-based analysis
- YARA demo
- Snort demo