- The Certified Network Forensics Examiner, C)NFE, certification was developed for a U.S. classified government agency. It's purpose is to push students with a digital and network forensic skill set to the next level. In this course you will navigate through 20+ modules of network forensic topics. The C)NFE provides practical experience through our lab exercises that simulate real-world scenarios covering investigation and recovery of data in network. The C)NFE focuses on centralizing and investigating logging systems as well as network devices. Take your forensics career to the next level with Mile2's Network Forensics Engineer course.
Who should attend
Digital and Network Forensics Examiners, IS Managers, Network Auditors, IT Managers
Prerequisites
- 2 years networking experience
- 2 years in IT Secuirty
- Working knowledge of TCPIP"
Course Objectives
Upon completion, Certified Network Forensics Examiner students will have knowledge to perform network forensic examinations. Be able to accurately report on their findings, and be ready to sit for the C)NFE exam.
Course Content
- Module 1: Digital Evidence Concepts
- Module 2: Network Evidence Challenges
- Module 3: Network Forensics Investigative Methodology
- Module 4: Network-Based Evidence
- Module 5: Network Principles
- Module 6: Internet Protocol Suite
- Module 7: Physical Interception
- Module 8: Traffic Acquisition Software
- Module 9: Live Acquisition
- Module 10: Analysis
- Module 11: Layer 2 Protocol
- Module 12: Wireless Access Points
- Module 13-20: See Detailed Outline
- Lab 1: Sniffing with Wireshark
- Lab 2: HTTP Protocol Analysis
- Lab 3: SMB Protocol Analysis
- Lab 4: SIP/RTP Protocol Analysis
- Lab 5: Protocol Layers
- Lab 6: Analyzing the capture of MacOf
- Lab 7: Manipulating STP algorithm
- Lab 8: Active Evidence Acquisition
- Lab 9: IEEE 802.11
- Lab 10: Use Snort as Packet Sniffer
- Lab 11: Use Snort as Packet Logger
- Lab 12: Check Snort’s IDS abilities with pre-captured attack pattern files
- Labs 13-19: See Detailed Outline "
Comments
This course also prepares students for the exam : Together with CPTE = GSEC and GNFA