Chapter 7. NetWitness Investigator


The ability to investigate a network-based crime presents a significant challenge to both the organization that experienced the crime and the network forensics examiner, who is responsible for conducting the analysis. Although many internal and external attacks occur across an organization's network, many organizations do not have in place network devices or tools that are able to conduct a network forensics investigation. In many environments, organizations are not able to capture network-based attacks, analyze ...

Get Digital Forensics for Network, Internet, and Cloud Computing now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.