- [Instructor] Let's talk about what you should know
before taking this course.
My goal is to help you quickly learn
essential network forensics concepts
and develop an overall understanding of the field.
But background knowledge in computer or digital forensics
would be helpful.
Throughout the course,
we'll be using both Windows and Linux operating systems,
but don't worry, if you don't have any spare computers
to practice your skills on,
watching the demos without doing them yourself
will still be effective.
Do keep in mind that many network forensics investigations
require proficiency in using various OSs,
and specialized tools.
If you'd like to follow along,
my setup includes three virtual machines,
Windows 10, Ubuntu, and Kali, Linux.
We'll be using the Linux and Windows command line a lot,
and I encourage you to try them on your own
as much as you can.
Again, if you're unfamiliar
with using the command line interface,
don't get discouraged.
You should still be able to follow the concepts
and you will get good exposure out of the experience.
I intentionally made sure that the software we're using
is mostly free or available as a trial version.
Let's take a quick look at them.
Wireshark is an open-source packet analyzer.
Syslog-ng is a free log management tool
for Unix, Linux OSs.
Kiwi is a Syslog server made available by SolarWinds.
Tcpdump
and WinDump are open-source packet capture utilities.
Fiddler and Squid
are free HTTP proxy tools.
Finally, Splunk is a commercial security information
and event management, or SIEM program.