{"product_id":"tactical-wireshark-a-deep-dive-into-intrusion-analysis-malware-incidents-and-extraction-of-forensic-evidence-paperback","title":"Tactical Wireshark: A Deep Dive Into Intrusion Analysis, Malware Incidents, and Extraction of Forensic Evidence - Paperback","description":"\u003cp\u003eby \u003cb\u003eKevin Cardwell\u003c\/b\u003e (Author)\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eTake a systematic approach at identifying intrusions that range from the most basic to the most sophisticated, using Wireshark, an open source protocol analyzer. This book will show you how to effectively manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.\u003c\/p\u003e \u003cp\u003eNext, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial \"click\" through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.\u003c\/p\u003e \u003cp\u003eIn the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.\u003c\/p\u003e After completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.\u003cp\u003e\u003c\/p\u003e\u003cb\u003eWhat You Will Learn\u003c\/b\u003e\u003cp\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eUse Wireshark to identify intrusions into a network\u003c\/li\u003e\n\u003cli\u003eExercise methods to uncover network data even when it is in encrypted form\u003c\/li\u003e\n\u003cli\u003eAnalyze malware Command and Control (C2) communications and identify IOCs\u003c\/li\u003e\n\u003cli\u003eExtract data in a forensically sound manner to support investigations\u003c\/li\u003e\n\u003cli\u003eLeverage capture file statistics to reconstruct network events\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003c\/p\u003e \u003cb\u003eWho This Book Is For\u003c\/b\u003eNetwork analysts, Wireshark analysts, and digital forensic analysts.\u003cbr\u003e\u003ch3\u003eBack Jacket\u003c\/h3\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eTake a systematic approach at identifying intrusions that range from the most basic to the most sophisticated, using Wireshark, an open source protocol analyzer. This book will show you how to effectively manipulate and monitor different conversations and perform statistical analysis of these conversations to identify the IP and TCP information of interest.\u003c\/p\u003e\u003cp\u003eNext, you'll be walked through a review of the different methods malware uses, from inception through the spread across and compromise of a network of machines. The process from the initial \"click\" through intrusion, the characteristics of Command and Control (C2), and the different types of lateral movement will be detailed at the packet level.\u003c\/p\u003e\u003cp\u003eIn the final part of the book, you'll explore the network capture file and identification of data for a potential forensics extraction, including inherent capabilities for the extraction of objects such as file data and other corresponding components in support of a forensics investigation.\u003c\/p\u003eAfter completing this book, you will have a complete understanding of the process of carving files from raw PCAP data within the Wireshark tool.\u003cp\u003e\u003c\/p\u003eYou will: \u003cp\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eUse Wireshark to identify intrusions into a network\u003c\/li\u003e\n\u003cli\u003eExercise methods to uncover network data even when it is in encrypted form\u003c\/li\u003e\n\u003cli\u003eAnalyze malware Command and Control (C2) communications and identify IOCs\u003c\/li\u003e\n\u003cli\u003eExtract data in a forensically sound manner to support investigations\u003c\/li\u003e\n\u003cli\u003eLeverage capture file statistics to reconstruct network events\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eAuthor Biography\u003c\/h3\u003e\u003cp\u003e\u003cb\u003eKevin Cardwell\u003c\/b\u003e is an Instructor, Curriculum Developer, Technical Editor and Author of Computer Forensics, and Hacking courses. He is the author of the EC Council Certified Penetration Testing Professional, Ethical Hacking Core Skills, Advanced Penetration Testing and ICS\/SCADA Security courses. He has presented at the Blackhat USA, Hacker Halted, ISSA and TakeDownCon conferences as well as many others. He has chaired the Cybercrime and Cyberdefense Summit in Oman and was Executive Chairman of the Oil and Gas Cyberdefense Summit. He is the author of Defense and Deception: Confuse and Frustrate the Hackers, Building Virtual Pentesting Labs for Advanced Penetration Testing 1st and 2nd edition, and Backtrack: Testing Wireless Network Security. He holds a BS in Computer Science from National University in California and an MS in Software Engineering from the Southern Methodist University (SMU) in Texas.\u003c\/p\u003e\u003cdiv\u003e\n\u003cstrong\u003eNumber of Pages:\u003c\/strong\u003e 462\u003c\/div\u003e\u003cdiv\u003e\n\u003cstrong\u003eDimensions:\u003c\/strong\u003e 0.97 x 10 x 7 IN\u003c\/div\u003e\u003cdiv\u003e\n\u003cstrong\u003eIllustrated:\u003c\/strong\u003e Yes\u003c\/div\u003e\u003cdiv\u003e\n\u003cstrong\u003ePublication Date:\u003c\/strong\u003e April 13, 2023\u003c\/div\u003e","brand":"Books by splitShops","offers":[{"title":"Default Title","offer_id":42125292437639,"sku":"9781484292907","price":70.18,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0601\/2623\/2711\/files\/b52afc98198d40d9299d31d7dae5a4be.webp?v=1732576628","url":"https:\/\/booksby.splitshops.com\/products\/tactical-wireshark-a-deep-dive-into-intrusion-analysis-malware-incidents-and-extraction-of-forensic-evidence-paperback","provider":"Books by splitShops","version":"1.0","type":"link"}