• Perform deep packet inspection and protocol level traffic analysis

• Analyze flow records using NetFlow Zeek and packet capture data

• Correlate network evidence with endpoint and cloud artifacts

• Extract malicious payloads and identify attacker infrastructure

• Automate network forensic analysis and timeline reconstruction

• Support investigations with defensible network based evidence

Who This Course Is For
This course is designed for network forensic analysts incident responders threat hunters SOC analysts security engineers and practitioners responsible for investigating network based attacks and supporting enterprise incident response.

Hands On Training Experience
Learners analyze realistic attack traffic using Zeek Wireshark and custom analysis tools. Exercises include examining packet captures extracting malware correlating events and building comprehensive incident timelines that mirror real world investigations.