Network forensics - defined as the investigation of network traffic patterns and data captured in transit between computing devices - can provide insight into the source and extent of an attack. It is used in forensic accounting and with the expansion of information technology it has become a growing field.

Network forensics is a relatively new field of forensic science. Computing has become network-centric. Data is now available outside of disk-based digital evidence. Network forensics can be performed as a standalone investigation or alongside a computer forensics analysis. When used alongside a computer forensic analysis it is used to reveal links between digital devices or reconstruct how a crime was committed.

Network investigations deal with volatile and dynamic information and is a sub-branch of digital forensics. It relates to the monitoring and analysis of computer network traffic for information gathering, legal evidence, or intrusion detection.

This course is a complement to our other courses in the series on becoming a forensic accountant.

Learning Objectives
  • Explore the basics of network forensic analysis.
  • Discover and examine how web protocols impact network forensic analysis.
  • Explore and examine how file transfer protocols impact network forensic analysis.
  • Identify and understand encrypted traffic analysis.
  • Explore wireless forensics.
  • Explore mobile forensics.
  • Identify and understand network analysis tools.
Last updated/reviewed: August 16, 2023
Course Search

Included In Certifications

This course is included in the following Certification Programs:

9 CoursesBecoming a Forensic Accountant Certification

  1. Introduction to Forensic Accounting
  2. Preparing to be a Forensic Accountant: Focus on Document Review and Handwriting Analysis
  3. Forensic and Fraud Interviewing Skills and Techniques
  4. Preparing to be a Forensic Accountant: Focus Digital Forensics
  5. Preparing to be a Forensic Accountant: Focus on Computer Forensics - Part 1
  6. Preparing to be a Forensic Accountant: Focus on Computer Forensics (Cryptology) - Part 2
  7. Preparing to be a Forensic Accountant: Focus on Computer Forensics (Steganography) Part 3
  8. Preparing to be a Forensic Accountant: Focus on Network Forensics
  9. Preparing to be a Forensic Accountant: Cloud Forensics
3 Reviews (12 ratings)

Reviews

5
Member's Profile
This course was a challenge - lots of new terms and information about topics involving IT and new technology. I came away with a very broad overview of the topic, which is what the lecturer intended.
5
Anonymous Author
Here is another great session from Lynn. I found it to be a little more technical but in line with all the session with word "forensic" in the titles.
5
Anonymous Author
Exceptional examples. I would use the data as a refresher course and for work reference material. Tutoring tool.
Prerequisites
Course Complexity: Foundational

No advanced preparation or prerequisites are required for this course.

Education Provider Information
Company: Illumeo, Inc., 75 East Santa Clara St., Suite 1215, San Jose, CA 95113
Contact: For more information regarding this course, including complaint and cancellation policies, please contact our offices at (408) 400- 3993 or send an e-mail to .
Instructor for this course
  Course Overview CPE
Course Syllabus
INTRODUCTION AND OVERVIEW
  Introduction to Preparing to be a Forensic Accountant: Focus on Network Forensics5:37
  Appendix - Terms10:37
  Network Forensics Analysis21:35
  Web and File Transfer Protocols13:19
  Encrypted Traffic Analysis and Mobile Analysis8:50
  Tools and Summary8:43
CONTINUOUS PLAY
  Preparing to be a Forensic Accountant: Focus on Network Forensics1:08:41
SUPPORTING MATERIAL
  Slides: Preparing to be a Forensic Accountant: Focus on Network ForensicsPDF
  Preparing to be a Forensic Accountant: Focus on Network Forensics Glossary/ IndexPDF
REVIEW AND TEST
  REVIEW QUESTIONSquiz
 FINAL EXAMexam