Reference no: EM132249139
Assignment
Packet capture and analysis tools are important components of real-time investigations. There are a variety of tools available, with a range of functionality. Among the decision points for evaluating tools is whether to select narrow, best-of-breed tools versus "Swiss army knife" tools that cover a number of functions, including packet capture. Another factor is cost, with a number of effective tools being available as open source or low cost options. Finally there are tools most appropriate for use on traditional cable networks and others that have evolved to capture packets on wireless networks.
Technology Inc. is a multinational corporation that sells a variety of technology and communications equipment across the globe. Over the past decade Technology Inc. has also acquired shares in several large technology consulting services and manufacturers of technology equipment.
Julie Nelson, the network administrator for Technology Inc., has hired you to investigate what appears to be potentially malicious activity going on within the Technology Inc. network. Among the tools you consider for use in this work are those that capture and analyze packets being transmitted across the network.
Complete the Toolwire lab. When submitting your assignment, attach the two screen prints you were asked to capture as part of the lab to this assignment to document successful completion of the lab.
Using the study resources, the virtual lab, and discussion information, write a 2-3 page paper that outlines the plan for how you will use packet analyzers to help inform the investigation. Also include how to report on the findings of the virtual lab activities in a cohesive report of findings that can be presented to executive leadership.
Engage with hands-on tools for capturing and analyzing packet-level data for suspicious activity.
Analyze and organize packet-level information into a coherent and dispositive report for evidentiary presentation in a digital forensic investigation.
Explore the factors within forensics data collection and analysis that ensure high quality evidence.