Sherri Davidoff

Jonathan Ham

An up-to-date, comprehensive, practical, guide to network forensics for information security professionals at all levels of experience * *Presents a proven, start-to-finish methodology for managing any network forensics investigation. *Enables professionals to uncover powerful forensic evidence from routers, firewalls, IDS, web proxies, and many other network devices. *Based on the world's first comprehensive Network Forensics training course, offered by the SANS Institute - a course that now sells out months in advance. Network forensics is transforming the way investigators examine computer crime: they have discovered that the network holds far more evidence than could ever be retrieved from a local hard drive. Network forensic skills are in especially short supply, and professionals are flocking to the scarce resources available for mastering these skills. This is a comprehensive, practical, and up to- date book on the subject. Building on their pioneering SANS Institute course, top network forensics experts Jonathan Ham and Sherri Davidoff take readers through an exciting, entertaining, and technically rigorous journey through the skills and principles of successful network investigation. One step at a time, they demonstrate how to recover usable forensic evidence from firewalls, web proxies, IDS, routers, wireless access points, and even raw packet captures. Coverage includes: * *Understanding the unique challenges associated with network investigation. *The state-of-the-art OSCAR Network Forensics Investigative Methodology. *Acquiring evidence passively, actively, and interactively. *Aggregating, correlating, and analyzing event logs. *Investigating compromised encryption and SSL interception Every section contains a real-world case study, and the book culminates with a 'Capstone' case study walking through an entire investigation from start to finish, and challenging readers to solve the crime themselves.

Tracking Hackers Through Cyberspace

Network Forensics

Shon Harris

Fernando Maymi

Prepare for the 2018 CISSP exam with this up-to-date, money-saving study packageDesigned as a complete self-study program, this collection offers a wide variety of proven, exam-focused resources to use in preparation for the current edition of the CISSP exam. The set bundles the eighth edition of Shon Harris’ bestselling CISSP All-in-One Exam Guide and CISSP Practice Exams, Fifth Edition—. You will gain access to a variety of comprehensive resources to get ready for the challenging exam. CISSP Bundle, Fourthe Edition fully covers all eight exam domains and offers real-world insights from the authors’ professional experiences. More than 2500 accurate practice exam questions are provided, along with in-depth explanations of both the correct and incorrect answers. The included Total Tester test engine provides full-length, timed simulated exams or customized quizzes that target selected chapters or exam objectives.•Presents 100% coverage of the 2018 CISSP Exam•Includes special discount to Shon Harris Brand CISSP video training from Human Element Security•Written by leading experts in IT security certification and training

CISSP Bundle, Fourth Edition

“This is a must-have work for anybody in information security, digital forensics, or involved with incident handling. As we move away from traditional disk-based analysis into the interconnectivity of the cloud, Sherri and Jonathan have created a framework and roadmap that will act as a seminal work in this developing field.” – Dr. Craig S. Wright (GSE), Asia Pacific Director at Global Institute for Cyber Security + Research. “It’s like a symphony meeting an encyclopedia meeting a spy novel.” –Michael Ford, Corero Network Security On the Internet, every action leaves a mark–in routers, firewalls, web proxies, and within network traffic itself. When a hacker breaks into a bank, or an insider smuggles secrets to a competitor, evidence of the crime is always left behind. Learn to recognize hackers’ tracks and uncover network-based evidence in Network Forensics: Tracking Hackers through Cyberspace. Carve suspicious email attachments from packet captures. Use flow records to track an intruder as he pivots through the network. Analyze a real-world wireless encryption-cracking attack (and then crack the key yourself). Reconstruct a suspect’s web surfing history–and cached web pages, too–from a web proxy. Uncover DNS-tunneled traffic. Dissect the Operation Aurora exploit, caught on the wire. Throughout the text, step-by-step case studies guide you through the analysis of network-based evidence. You can download the evidence files from the authors’ web site (lmgsecurity.com), and follow along to gain hands-on experience. Hackers leave footprints all across the Internet. Can you find their tracks and solve the case? Pick up Network Forensics and find out.

Jonathan Ham

Books

Your next favorite book is out there