O'Reilly - Capture and Analysis of Network-based Evidence

In our globally connected and online world today, massive amounts of data flow across countless networks. Much of that data is ephemeral, meaning that after it has passed across the network, it's gone. For law enforcement and IT professionals who are engaged in digital forensic investigations, understanding how to read the data transmitted on a network is crucial to carrying out their task. This is especially important in the case of incident response and corporate investigations and can help in identifying unauthorized intrusions on a network.

If want to become part of the ever-growing ranks of digital investigators and you have entry- to intermediate-level computer skills, this course will show you how to use the industry-favorite tool Wireshark to capture and analyze network traffic. You'll learn how to extract files from the "packets" that make up digital transmissions over a network. And, you'll see how to locate and identify the important header information and metadata contained in those packets.