Publisher's Synopsis
PLEASE READ:
This workbook is one of 4 publications used for the Certified Network Forensic Analysis Manager course and is only meant to serve as a supplemental study aid for the Exam Prep Guide listed below. It is strongly recommended that the Course Workbook only be purchased with the Exam Prep Guide.
C)NFAM EXAM PREP GUIDE:
https: //www.amazon.com/dp/0578526948
COURSE INFORMATION:
https: //phase2advantage.com/cnfam-certification
COURSE DESCRIPTION
The Certified Network Forensic Analysis Manager certification course was originally developed for the U.S. government, and has now been made available to city, county, and state law enforcement agencies. Civilian personnel outside the law enforcement community are also authorized to attend on a case-by-case basis.
This comprehensive course brings incident response and network forensic core competencies to advanced levels by presenting students with 12 detailed learning objectives. Students will be provided with both experiential knowledge and practical skills that simulate real-world scenarios, investigations, and recovery of evidentiary data in systems and networks. With a specific focus on the centralizing and investigating of logging systems and network devices, students will cover topics such as: Incident Response Management; Live Data Collection; Analysis Methodology; Malware Triage; and, practical lab exercises utilizing the Wireshark packet capturing tool for network investigations.
LEARNING OBJECTIVES:
Domain 01: Preparing for Incidents / Forensic Investigations
Domain 02: Incident Response Management
Domain 03: Pre-Incident Preparation
Domain 04: Initiating Incident / Forensic Investigations
Domain 05: Initial Development of Leads
Domain 06: Principles of Live Data Collection
Domain 07: Principles of Network Evidence
Domain 08: Enterprise Services and Topology
Domain 09: Forensic Analysis Methodology
Domain 10: Static / Dynamic Malware Triage
Domain 11: Incident Remediation Methodologies
Domain 12: Wireshark Lab Exercises
