دانلود کتاب Wireshark تاکتیکی جهت تحلیل ترافیک شبکه

I wrote this book so that people who want to leverage the fantastic capabilities of Wireshark have a reference where you get the “hands-on” tactical concepts that are not covered in most publications about Wireshark. I wrote this from an analysis perspective based on more than 30 years of being an analyst, training analysts and leading analysis teams across the globe. Within this book, you will find the tips and techniques that I have mastered and refined over those years of extensive analysis. For the most part, the process has not changed, but the methods and sophistication of the attackers and criminals have, and this is why we have to continue to enhance and hone our skills. As the title suggests, this book is broken down into three main parts:

• Intrusion Analysis • Malware Analysis • Forensics Analysis

The book does not go deep into topics or concepts that are not part of what we use from a tactical standpoint of Wireshark. There are plenty of references that are available for this. Wherever possible, we do explain some areas outside of Wireshark, and this is most evident when we talk about memory and how malware uses system calls for connections. We start off with a review of what an actual intrusion looks like, and then we introduce a methodology. This is a common theme of the book; we present methodologies that are proven when it comes to performing a systematic analysis process. Each of the areas can be taken on its own, so if you just want to focus on malware, then you can read that section.