WSU04: Wireshark Network Forensics and Security

Product Description
This course focuses on network forensics including capture locations, stealth-mode capture, optimal capture and display filters, validating encrypted logins, identifying reconnaissance processes, locating header and payload signatures, catching penetration tests, malware behavior, backdoor communications and virus traffic. Section 1: Analyzer Placement a) Analyzing Hubbed Networks b) Analyzing Switched Networks c) Analyzing Routed Networks d) Analyzing WAN Links e) Tapping into Full-Duplex Links f) Capturing in Stealth Mode g) Obtaining Evidence Using a Honeypot Section 2: Unusual Network Communications a) Vulnerabilities in the TCP/IP Resolution Process b) Route Resolution c) Spotting Unacceptable Traffic Section 3: Reconnaissance Processes a) Port Scans b) Mutant Scans c) IP Scans d) Application Mapping e) OS Fingerprinting Section 4: Analyzing ICMP Traffic a) ICMP Types and Codes b) ICMP Discovery c) Router Redirection d) Dynamic Router Discovery e) Service Refusal f) OS Fingerprinting Section 5: TCP Security a) TCP Segment Splicing b) TCP Fake Resets Section 6: Address Spoofing a) MAC Address Spoofing b) IP Address Spoofing Section 7: Building Firewall ACL Rules a) Overview of ACL Rule Types Section 8: Signatures of Attacks a) Signature Locations b) Header Signatures c) Sequencing Signatures d) Payload Signatures e) Obtaining Signatures f) Attacks and Exploits g) Password Cracks h) Denial of Service Attacks i) Redirections

Course Overview - Introduction:
Section 1: Analyzer Placement
Section 2: Unususal Network Communications
Section 3: Reconnaissance Processes
Section 4: Analyzing ICMP Traffic
Section 5: TCP Security
Section 6: Address Spoofing
Section 7: Building Firewall ACL Rules
Section 8: Signatures of Attacks
Link download :
booktraining.net_shark_net_forensics_and_security.part4.rar

http://rapidshare.com/files/219529793/booktraining.net_shark_net_forensics_and_security.part4.rar

booktraining.net_shark_net_forensics_and_security.part2.rar

http://rapidshare.com/files/219529790/booktraining.net_shark_net_forensics_and_security.part2.rar

booktraining.net_shark_net_forensics_and_security.part3.rar

http://rapidshare.com/files/219529786/booktraining.net_shark_net_forensics_and_security.part3.rar

booktraining.net_shark_net_forensics_and_security.part5.rar

http://rapidshare.com/files/219529706/booktraining.net_shark_net_forensics_and_security.part5.rar

booktraining.net_shark_net_forensics_and_security.part1.rar

http://rapidshare.com/files/219529653/booktraining.net_shark_net_forensics_and_security.part1.rar

Password default : booktraining.net