Course Contents This course is closely aligned with the C)NFE and C)DFE exam objectives. The course will cover the following topic areas (dates are tentative and subject to change): Mar 11th Review Syllabus and Class Policies CNFE Module 0b Introduction to Network Forensics – CNFE Module 1 Digital Evidence Concepts – CNFE Module 2 Network Evidence Challenges – CNFE Module 3 Network Forensics Investigative Methodology – CNFE Module 4 Network Based Evidence – CNFE Lab 1 Sniffing with Wireshark – CNFE Lab 2 – HTTP Protocol Analysis CNFE Lab 3 SMB Protocol Analysis – Mar 18th NO CLASS Spring Break – Mar 25th CNFE Module 5 Network Principles – CNFE Module 6 Internet Protocol Suite – CNFE Module 7 Physical Interception – CNFE Module 8 Traffic Acquisition Software – CNFE Module 9 – Live Acquisition CNFE Lab 4 SIP/RTP Protocol Analysis – CNFE Lab 5 Protocol Layers – CNFE Lab 6 Analyzing the Capture of MacOf – CNFE Lab 7 Manipulating an STP Algorithm – Apr 1st CNFE Module 10 Layer 2 Protocol – CNFE Module 11 Protocol, Packet, and Flow Analysis – CNFE Module 12 – Wireless Access Points CNFE Module 13 Wireless Packet Capture and Analysis – CNFE Module 14 NIDS/Snort – CNFE Module 15 Centralized Logging and Syslog – CNFE Lab 8 IEEE 802.11 – CNFE Lab 9 Decrypting SSL Traffic by Using a Given Certificate Private Key – CNFE Lab 10 Using Nmap for Sniffing, Port Scanning and Banner Grabbing – CNFE Lab 11 – Real Life Network Forensics CNFE Lab 12 Network Device Log – Apr 8th CNFE Module 16 Investigating Network Devices – CNFE Module 17 Web Proxies and Encryption – CNFE Module 18 Network Tunneling – CNFE Module 19 Malware Forensics – CNFE Module 20 Network Forensics and Investigating Logs –
Course Contents This course is closely aligned with the C)NFE and C)DFE exam objectives. The course will cover the following topic areas (dates are tentative and subject to change): Mar 11th Review Syllabus and Class Policies CNFE Module 0b – Introduction to Network Forensics CNFE Module 1 – Digital Evidence Concepts CNFE Module 2 – Network Evidence Challenges CNFE Module 3 – Network Forensics Investigative Methodology CNFE Module 4 – Network Based Evidence CNFE Lab 1 – Sniffing with Wireshark CNFE Lab 2 – HTTP Protocol Analysis CNFE Lab 3 – SMB Protocol Analysis Mar 18th NO CLASS – Spring Break Mar 25th CNFE Module 5 – Network Principles CNFE Module 6 – Internet Protocol Suite CNFE Module 7 – Physical Interception CNFE Module 8 – Traffic Acquisition Software CNFE Module 9 – Live Acquisition CNFE Lab 4 – SIP/RTP Protocol Analysis CNFE Lab 5 – Protocol Layers CNFE Lab 6 – Analyzing the Capture of MacOf CNFE Lab 7 – Manipulating an STP Algorithm Apr 1st CNFE Module 10 – Layer 2 Protocol CNFE Module 11 – Protocol, Packet, and Flow Analysis CNFE Module 12 – Wireless Access Points CNFE Module 13 – Wireless Packet Capture and Analysis CNFE Module 14 – NIDS/Snort CNFE Module 15 – Centralized Logging and Syslog CNFE Lab 8 – IEEE 802.11 CNFE Lab 9 – Decrypting SSL Traffic by Using a Given Certificate Private Key CNFE Lab 10 – Using Nmap for Sniffing, Port Scanning and Banner Grabbing CNFE Lab 11 – Real Life Network Forensics CNFE Lab 12 – Network Device Log Apr 8th CNFE Module 16 – Investigating Network Devices CNFE Module 17 – Web Proxies and Encryption CNFE Module 18 – Network Tunneling CNFE Module 19 – Malware Forensics CNFE Module 20 – Network Forensics and Investigating Logs
5991-brabbs-network_and_digital_forensics-w17.docx