Wireshark Configuration for Cyber Security Analysis

سرفصل های دوره

This course will teach you the best settings and filters to use in Wireshark for quickly spotting malware behavior, enumeration and scans, and other suspect traffic.

1. Course Overview

1. Course Overview

2. Top Five Wireshark Features for Forensic Analysis

1. Introduction to Cyber Security Analysis with Wireshark

2. Lab 1 - Creating a Security Profile

3. Lab 2 - The Statistics View

4. Lab 3 - Configuring GeoIP Location Resolution

5. Lab 4 - Configuring Custom Columns

6. Lab 5 - Configuring Name Resolution

7. Lab 6 - Exporting HTTP Objects and Files

8. Lab 7 - Reassembling and Exporting FTP Files

9. Module Summary

3. Filters and Coloring Rules for Spotting Suspect Traffic

01. Intro to Filters and Coloring Rules in Wireshark

02. Analyzing Unusual DNS Activity

03. Lab 7 - Part 1 - Filtering for Unusual DNS Activity

04. Lab 7 - Part 2 - Filtering for Unusual DNS Activity

05. Analyzing Traffic from Unusual Country Codes

06. Lab 8 - Filtering for Traffic Based on Country Location

07. Analyzing Suspect TCP Behavior and Flags

08. Lab 9 - Part 1 - Filtering for Suspect TCP Behavior

09. Lab 9 - Part 2 - Filtering for Suspect SSH Traffic

10. Lab 10 - Filtering for Executable Files

11. Lab 11 - Analyzing Traffic over Non-standard Ports

12. Summary

4. Configuring Wireshark for Decrypting Traffic

1. Module Introduction

2. Capturing the TLS Session Keys

3. Lab 12 - Decrypting TLS Traffic in Wireshark

4. Course Summary

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight