Principles of Network Forensics - Department of Computer ...

More documents

Recommendations

Info

Connecting Acquisition Devices PUSB adapter PDisk-to-disk No boot required Open the box, connect directly to drive PCross-over cable Use network acquisition technology
Live <strong>Network</strong> Acquisitions (I) PServlet installed on target machine Requires administrator access Can be installed remotely PServlet feeds image to acquiring machine PMay require authentication (E.g., EnCase)
Page 1 and 2: Principles of Network Forensics Ric
Page 3 and 4: Internet Concepts Review IPv4
Page 5 and 6: X.25 Packet Flag 01111110 Address C
Page 7 and 8: Internet Model P Application Layer
Page 9 and 10: Network Access Layer CCITT X.25 I
Page 11 and 12: Transport Layer P Transmission Cont
Page 13 and 14: P IP Addresses 4-byte numbers -
Page 15 and 16: Domain Hierarchy
Page 17 and 18: Routing PTransport layer routing ta
Page 19 and 20: Classless Inter-Domain Routing (CID
Page 21 and 22: Network-based Live Acquisitions
Page 23: Safely Booting Target Machine PHeli
Page 27 and 28: Network Forensics Principles
Page 29 and 30: Network Attacks PProtocol Eg, SQL-
Page 31 and 32: Network Traffic Capture Logging Iss
Page 33 and 34: Network Traffic Analysis Usually Re
Page 35: Principles of Network Forensics Ric

Principles of Network Forensics - Department of Computer ...

Create successful ePaper yourself

Delete template?

Save as template?