Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

5
Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute www.packet-level.com
  • date post

    20-Dec-2015
  • Category

    Documents

  • view

    229
  • download

    3

Transcript of Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

Page 1: Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

Network ForensicsLaura Chappell

Sr. Protocol/Security Analyst

Protocol Analysis Institute

www.packet-level.com

Page 2: Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

Contents

What is “network forensics”

Where to place the wiretap

Legal issues of wiretapping

Evidence examination

TCP connection overflow attack (justascan.dmp)

OS fingerprinting (osfingeprinting.dmp)

Malware infection (evilprogram.dmp)

Back-door IRS channel (clientdying.dmp)

Network flood attack (macof.dmp)

Page 3: Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

I Could Show You Screenshots…

Page 4: Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

Or We Could Work Live…

Page 5: Network Forensics Laura Chappell Sr. Protocol/Security Analyst Protocol Analysis Institute .

Contact Details

Laura Chappell Protocol Analysis Institute, LLC 5339 Prospect Road, Suite 343 San Jose, CA 95129 Phone (408) 378-7841 Fax (408) 378-7891 Web: www.packet-level.com Email: [email protected]