Network Threat Hunting

Network-based hunting focuses on utilizing network traffic and resources to discover intrusions into an enterprise network. This course introduces the fundamentals of network hunting, including key indicators of compromise and methods for identifying malicious activity. You’ll learn to capture and analyze network traffic using tools like Wireshark and NetworkMiner, while gaining a deep understanding of common protocols and how to spot abnormal patterns in ICMP, DHCP, DNS, and HTTP traffic. By applying real-world techniques in traffic capture and packet analysis, you'll be equipped to detect threats and enhance your organization's security posture through proactive network defense.