Network Monitoring and Analysis

Overview

In this course, you will be provided with an overview of network analysis tools more commonly referred to as “packet sniffers”. In particular, you will sniff the network and analyze packets for malicious threats. You’ll also craft common filtering commands in both tcpdump and Wireshark to analyze the contents of packet capture. By the end of this course, you will be able to: - Describe how network traffic analysis can help to detect, prevent, and respond to security incidents - Use packet sniffing tools to capture and view network communications - Analyze packets to interpret network communications

Syllabus

Understand network traffic

In this module, you will be provided with an overview of network analysis tools more commonly referred to as “packet sniffers”. You will acquire tips on how to maintain awareness with network monitoring and learn about data exfiltration attacks. You will also learn about network traffic flows.

Capture and view network traffic

In this module, you will sniff the network and analyze packets for malicious threats. You will learn more about packets and packet captures and explore the process of interpreting network communications with packets. You will acquire lab tips and troubleshooting steps and reexamine the fields of a packet header.

Packet inspection

In this module, learners will craft common filtering commands in both tcpdump and Wireshark to analyze the contents of packet capture. You will understand specific details about tcpdump and capture your first packet.