Course Description

This course is organized into ten subject modules covering the following subjects:

  • Concepts in Network Forensics
  • Introduction to Legal and Jurisdictional Issues
  • The Importance of Server Logs
  • Analysis of a Network Attack
  • Network Monitoring for Forensic Analysis
  • Attack Prediction
  • Establishing Premeditation
  • Internet Link Analysis
  • Web Site Link Associations
  • P2P Connection Analysis
  • Router and Switch Forensics
  • Overview of RAID and Forensics
  • Internet Artifacts – Chat logs
  • Discovery Case Example

Prerequisites: Hands on experience with PCs (hardware and operating systems).