Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Hands-On Network Forensics
  • Table Of Contents Toc
Hands-On Network Forensics

Hands-On Network Forensics

By : Nipun Jaswal
3.2 (6)
close
close
Hands-On Network Forensics

Hands-On Network Forensics

3.2 (6)
By: Nipun Jaswal

Overview of this book

Network forensics is a subset of digital forensics that deals with network attacks and their investigation. In the era of network attacks and malware threat, it’s now more important than ever to have skills to investigate network attacks and vulnerabilities. Hands-On Network Forensics starts with the core concepts within network forensics, including coding, networking, forensics tools, and methodologies for forensic investigations. You’ll then explore the tools used for network forensics, followed by understanding how to apply those tools to a PCAP file and write the accompanying report. In addition to this, you will understand how statistical flow analysis, network enumeration, tunneling and encryption, and malware detection can be used to investigate your network. Towards the end of this book, you will discover how network correlation works and how to bring all the information from different types of network devices together. By the end of this book, you will have gained hands-on experience of performing forensics analysis tasks.
Table of Contents (16 chapters)
close
close
Lock Free Chapter
1
Section 1: Obtaining the Evidence
4
Section 2: The Key Concepts
8
Section 3: Conducting Network Forensics

Packet types and subtypes

Before we jump into packet types and subtypes, let's see what happens when we connect to a Wi-Fi access point. For this demonstration, we will be using a TP-Link router and an Apple iPhone 7. I will try to connect to the VIP3R network from the phone, but I will not use the correct password. Look at the following screenshot:

Generally, when we open the settings on the iPhone or any other phone, we start to see the networks in the vicinity of the phone. This is because each access point constantly sends out beacon frames to denote its presence. For the phone to know more about the network, a probe request is sent to the access point. We can see that our Wi-Fi access point (78:44:76:E7:B0:58) sends a probe response (8155) to the iPhone with the station parameters and supported rates.

Next, the authentication process is initiated by the iPhone, and...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Hands-On Network Forensics
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon