Network Forensics Courses and Certifications

Computer Science 336: Network Forensics

Learn to investigate network threats through forensic analysis, traffic inspection, intrusion detection, malware identification, and incident response.

• Study.com
• 17 hours 20 minutes
• Self-Paced
• Paid Course

BSides SATX

Clean Forensics: Analyzing Network Traffic of Vacuum Bots - Lecture

Explore network forensics of vacuum bots, uncovering security and privacy concerns. Learn step-by-step analysis of bot communication, authentication protocols, and potential vulnerabilities in smart home devices.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Digital Forensics: System & Network Forensics

In this course, you will start by analyzing artifacts at the OS level. Specifically, this section dives deeply into the Windows OS and its artifacts. The location of each artifact, the tools needed fo

• INE
• 8 hours
• Self-Paced
• Paid Course

DEFCONConference

The Things Know What You Did Last Session - Corporate Network Forensics and Threat Detection

Uncover corporate network investigation techniques through real cases: timecard fraud via hidden automated devices, IoT forensics on Chinese voting machines, and hunting North Korean IT worker fraud.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

BSidesLV

Clean Forensics - Analyzing Network Traffic of Vacuum Bots

Analyze vacuum-bot network traffic through digital forensics.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

EC-Council

Digital Forensics Essentials (DFE)

193 ratings at Coursera

Investigate cybercrime end to end: acquire and duplicate evidence, defeat anti-forensics, and examine Windows, Linux, network, dark web, email, and malware artifacts.

• Coursera
• 12 weeks, 2 hours a week
• Self-Paced
• Paid Course

Infosec

Technical Deep Dive with Incident Response Tools

97 ratings at Coursera

Work through the incident response phases hands-on: analyze memory and network artifacts, investigate breach and live-hacking scenarios, and hunt SolarWinds indicators of compromise.

• Coursera
• 5 weeks, 1 hour a week
• Self-Paced
• Paid Course

Cyber Security: Digital Forensics

31 ratings at Coursera

Recover hidden and deleted files from Windows, Linux and macOS file systems, capture volatile RAM and network traffic, and extract evidence from mobile and IoT devices.

• Coursera
• 6 weeks, 2 hours a week
• Self-Paced
• Paid Course

Cyber Security: Digital Forensics

31 ratings at Coursera

Recover files from Windows, Linux and macOS systems, capture volatile RAM and network traffic, extract mobile and IoT evidence, and prepare court-admissible forensic findings.

• Coursera
• 6 weeks, 2 hours a week
• Self-Paced
• Paid Course

Network Traffic Analysis with Wireshark

20 ratings at Coursera

Capture, filter, and analyze network traffic in Wireshark to spot DDoS, port scanning, and data exfiltration, then report findings in a capstone traffic investigation.

• Coursera
• 5 weeks, 3 hours a week
• Self-Paced
• Paid Course

Packt

Digital Forensics for Pentesters - Hands-On Learning

14 ratings at Coursera

Build a forensics lab in VirtualBox, then acquire disk images with Kali forensic mode and Autopsy, reverse malware in Ghidra, hide data with Steghide, analyze traffic in Wireshark.

• Coursera
• 11 weeks, 1 hour a week
• Self-Paced
• Paid Course

EC-Council

Digital Forensics Essentials: Hands-On Edition

Conduct forensic investigations: acquire and preserve digital evidence, examine hard disks and file systems, defeat anti-forensics, and investigate Windows, Linux, network, dark web, email, and malware incidents.

• Coursera
• 12 weeks, 3 hours a week
• Self-Paced
• Paid Course

VoIP Traffic Analysis

Today, all enterprises, large and small depend on VoIP to provide voice communication both internally and externally to the company. Most organizations even have dedicated Voice VLANs and/or physical

• INE
• 5 hours
• Self-Paced
• Paid Course

Have you ever wanted to learn how to perform digital forensics activities after an intrusion? The Digital Forensics Professional Learning Path will teach you how to identify and gather digital evidenc

• INE
• 24 hours
• Self-Paced
• Paid Course

Black Hat

Detecting Malicious Files with YARA Rules as They Traverse the Network

Shows how to use Zeek and custom scripts to extract network files and scan targeted MIME types with YARA for early malware detection.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk