Mastering Windows Network Forensics and Investigation, 2nd Edition

Setting Up Test Environments in Training Laboratories

We do not advocate the malicious use of these tools, nor do we suggest that they are safe. You should carefully control any educational use of such tools within a suitable testing environment, an example of which is defined in this appendix. Tools are updated way too frequently to state with absolute certainty that they will work the same and produce the desired outcome with every subsequent version. Proactive research is a critical skill and should be given its due diligence whenever possible. Always remember the forensic examiner’s mantra: “Google is your friend!”

Chapter 1: Network Investigation Overview

This chapter provides useful information to the reader about what a network-based investigation ...