TechNet Webcast: Network Forensics: Identifying Attack Signatures (Level 200)
Overview Listening in on network traffic (network forensics) can reveal whether an application and data communications are secure, and point out possible reconnaissance processes preceding an attack. Learning the signatures of the breach traffic is also the first step in blocking it at bordering devices or at the desktop. The presenter of this webcast begins by displaying numerous trace files indicating network reconnaissance is underway on a network (operating system fingerprinting, IP scans, zombie-based scans, blind UDP scans, application mapping sessions, and directed TCP scans) and identifies the unique signatures in each of these communications.
| Publisher | Microsoft | ||
|---|---|---|---|
| Live Date | 31st August 2007 01:00 BST | ||
| Format | Webcast | ||
| Topics | |||
-
Did you find this white paper useful? 3 out of 4 users found this white paper useful
White Paper RSS
Download
Register
