Network traffic analysis (NTA)

Spot and probe network anomalies using industry tools and techniques.

---

Wireshark

• Introduction
• Nmap scans
• ARP poisoning & on-path
• Identifying hosts
• Tunneling traffic
• Clear-text protocol analysis
• Encrypted protocol analysis
• Hunt clear-text credentials
• Firewall rules

Snort

• Introduction
• Writing IDS rules
• MS17-010
• Log4j
• Brute force
• Reverse shell

NetworkMiner

• Introduction
• Network forensics
• NetworkMiner in a nutshell

Zeek

• Introduction
• Network security monitoring
• Zeek in a nutshell
• Signatures
• Scripts
• Scripts and signatures
• Frameworks
• Packages
• Anomalous DNS
• Phishing
• Log4J

Brim

• Introduction
• Brim in a nutshell
• Use cases
• Malware C2 detection
• Crypto mining

---