Portable System for Network Forensics Data Collection and Analysis

A portable lab environment for network level analysis is a necessary tool today for the forensic analyst. With today's malicious software and myriad of network aware client- side software, one of the tools that should be in the forensic analysts' toolbox is a portable response system for data...

By

July 15, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - FOR508- Evolving with the Threat_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

FOR508: Evolving with the Threat – Spring 2025 Course Update

The Spring 2025 FOR508 course refresh includes upgrades to materials on credential theft, enhanced threat hunting, and modern attacker techniques.

Mike Pilkington

CD - Blog - Making Linux Security Accessible Blog Series - Part 4_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Process Management: Knowing What is Running on Your System – Part 4 of 5 of the Terminal Techniques for You (TTY): Making Linux Security Accessible Blog Series

Welcome to the fourth installment in our TTY series! So far, we've explored how to navigate the Linux file system, keep your software updated, and control file permissions. In this post, we're going to discover another critical aspect of Linux security: understanding and managing the processes...

Charles Goldner

DFIR - Blog - SANS Threat Analysis Rundown in Review- Breaking Down March 2025’s Discussion_340 x 340 (1).jpg

Digital Forensics, Incident Response & Threat Hunting

SANS Threat Analysis Rundown in Review: Breaking Down March 2025’s Discussion

Datadog’s Zack Allen joined to share threat intelligence resources and discuss tools and methodologies for analysts.