Skip to content

Instantly share code, notes, and snippets.

@ZacFran

ZacFran/network_analysis.md

Last active August 11, 2023 12:40
Show Gist options
  • Save ZacFran/1b77653ab538eb0bd529da376f31075b to your computer and use it in GitHub Desktop.
Save ZacFran/1b77653ab538eb0bd529da376f31075b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
network_analysis.md

Notes

Fingerprinting

  • identification of a remote system

POF

  • a command line tool with will identify the type of system and browser.

Traffic Baselining

  • Snapshot of network traffic over a given amount of time.

Network data types

  1. full packet capture data
  2. session data
  • sflow
  • Netflow
  1. Statistical data
  2. packet string data
  3. alert data
  4. log data

DATA Collection Devices

  • IN-line
  • Passive

Collection Methods

  • TAP
  • SPAN
  • ARP Spoofing (MitM)

Anomaly Detection

  • Indicator of Attack
  • Indicator of Compromise
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment