Overview
Network forensics - defined as the investigation of network traffic patterns and data captured in transit between computing devices - can provide insight into the source and extent of an attack. It is used in forensic accounting and with the expansion of information technology it has become a growing field.
Network forensics is a relatively new field of forensic science. Computing has become network centric. Data is now available outside of disk-based digital evidence. Network forensics can be performed as a standalone investigation or alongside a computer forensics analysis. When used alongside a computer forensic analysis it is used to reveal links between digital devices or reconstruct how a crime was committed.
Network investigations deal with volatile and dynamic information and is a sub-branch of digital forensics. It relates to the monitoring and analysis of computer network traffic for information gathering, legal evidence, or intrusion detection. This course is a complement to our other courses in the series on becoming a forensic accountant.
Prerequisites
None
Objectives
- Explore the basics of network forensic analysis
- Discover and examine how web protocols impact network forensic analysis
- Explore and examine how file transfer protocols impact network forensic analysis
- Identify and understand encrypted traffic analysis
- Explore wireless forensics
- Explore mobile forensics
- Identify and understand network analysis tools
Highlights
- Forensic Accounting
- Accounting
- Auditing
- Finance
