SEC 440 Network Forensics
This hands-on intermediate course provides students with the knowledge and skills necessary to begin a digital investigation centered on network devices and associated network traffic. The course begins with a review of common network topologies and protocols. The course proceeds to introduce industry-accepted tools and techniques used to identify and acquire digital evidence residing or in transmission on a network. The course concludes with a primer on several data exfiltration techniques used by criminals during network intrusions and data theft.