BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

Security

374Understanding Network Packets and Protocol Layers
375Wireshark Fundamentals and Interface Selection
376Display Filters and Packet Search Techniques
377TCP Stream Analysis and Session Reconstruction
378HTTP Traffic Analysis and Credential Extraction
379DNS Traffic Analysis and Query Patterns
380TLS/SSL Traffic Analysis and Certificate Inspection
381Decrypting TLS Traffic with Private Keys
382Identifying Malicious Traffic Patterns
383Packet Capture Performance and Ring Buffers
384ARP Protocol Fundamentals and Security Weaknesses
385ARP Cache Mechanics and Poisoning Principles
386ARP Spoofing Attack Techniques
387Tools for ARP Poisoning: arpspoof and Ettercap
388ARP Poisoning for Traffic Interception and Modification
389Detecting ARP Spoofing Attacks
390ARP Spoofing Defense Mechanisms
391IPv6 Neighbor Discovery and Spoofing Parallels
392Man-in-the-Middle Attack Fundamentals
393ARP Spoofing for MITM Positioning
394DNS Spoofing and Cache Poisoning
395SSL Stripping Attacks
396Rogue DHCP and Gateway Attacks
397SSL/TLS MITM with Certificate Substitution
398MITM on Wireless Networks
399HTTP Proxy and Transparent Interception
400Session Hijacking via MITM
401MITM Attack Tools and Frameworks
402Limitations of Sniffing on Switched Networks
403MAC Flooding Attacks
404Port Mirroring and SPAN Ports
405ARP Cache Poisoning on Switches
406MAC Address Spoofing and Duplication
407DHCP Attacks for Traffic Interception
408Router Advertisement Attacks (IPv6)
409Switch Port Security and Defenses
410Signs of Network Interception
411ARP Cache Inspection
412Certificate Validation Failures
413Timing and Latency Analysis
414Port Security and MAC Filtering
415DHCP Snooping and DAI
416Network Monitoring and Baselining

Security

374Understanding Network Packets and Protocol Layers
375Wireshark Fundamentals and Interface Selection
376Display Filters and Packet Search Techniques
377TCP Stream Analysis and Session Reconstruction
378HTTP Traffic Analysis and Credential Extraction
379DNS Traffic Analysis and Query Patterns
380TLS/SSL Traffic Analysis and Certificate Inspection
381Decrypting TLS Traffic with Private Keys
382Identifying Malicious Traffic Patterns
383Packet Capture Performance and Ring Buffers
384ARP Protocol Fundamentals and Security Weaknesses
385ARP Cache Mechanics and Poisoning Principles
386ARP Spoofing Attack Techniques
387Tools for ARP Poisoning: arpspoof and Ettercap
388ARP Poisoning for Traffic Interception and Modification
389Detecting ARP Spoofing Attacks
390ARP Spoofing Defense Mechanisms
391IPv6 Neighbor Discovery and Spoofing Parallels
392Man-in-the-Middle Attack Fundamentals
393ARP Spoofing for MITM Positioning
394DNS Spoofing and Cache Poisoning
395SSL Stripping Attacks
396Rogue DHCP and Gateway Attacks
397SSL/TLS MITM with Certificate Substitution
398MITM on Wireless Networks
399HTTP Proxy and Transparent Interception
400Session Hijacking via MITM
401MITM Attack Tools and Frameworks
402Limitations of Sniffing on Switched Networks
403MAC Flooding Attacks
404Port Mirroring and SPAN Ports
405ARP Cache Poisoning on Switches
406MAC Address Spoofing and Duplication
407DHCP Attacks for Traffic Interception
408Router Advertisement Attacks (IPv6)
409Switch Port Security and Defenses
410Signs of Network Interception
411ARP Cache Inspection
412Certificate Validation Failures
413Timing and Latency Analysis
414Port Security and MAC Filtering
415DHCP Snooping and DAI
416Network Monitoring and Baselining

← Security

Lesson 382 of 3,052·9. Network Security - Traffic AnalysisPro lesson

Identifying Malicious Traffic Patterns

Recognize indicators of compromise: port scans, command-and-control traffic, data exfiltration, and attack signatures.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course