Digital Forensic Investigators, Essay Example

Network Forensics

Digital forensic investigators utilize network forensic analysis tools (NFAT) for capturing and examining data that is travelled within the network.  For overviewing functionality of a typical NFAT tool, Xplico is recommended as it provides decoding on the Internet traffic (Xplico – internet traffic decoder. network forensic analysis tool (NFAT), n.d). Likewise, these tools provide real time monitoring and capturing of data along with real time packet capturing, network content analysis and report generation that will facilitate investigators to identify anomalies. Moreover, by the facilitates of the (NFAT) tool, investigators can playback traffic and drill down the network traffic for examination, as data packets are filtered to ease the process of detecting information leakage incident. However, investigators must keep in mind the dissimilarities between wired and wireless network characteristics associated with playback analysis data. Moreover, for playing back the recorded network communications, NFAT will be utilized and the playback will facilitate node to node communication analysis. However, there is one condition i.e. archiving data securely after data capturing from a real time network.

Time sequencing analysis techniques, patterns and content techniques are persuade, while analyzing data capturing from Intrusion detections system (IDS) and NFAT. Likewise, Infini stream also uses time sequencing techniques to replay network activities (Network world – google books). Moreover, pattern analysis provides the minimum requirements for network security and content analysis provides a deep inspection of packets. NFAT will provide data from wired and wireless interfaces for constructing simulated environment of the current situation within the network. Investigators will then review the time line that will demonstrate events and activities related to threats, which is presentable in the course system.

References

Xplico – internet traffic decoder. network forensic analysis tool (NFAT), n.d Retrieved 11/13/2011, 2011, from http://www.xplico.org/

Network world – google books Retrieved 11/13/2011, 2011, from http://books.google.com.pk/books?id=DxkEAAAAMBAJ&pg=PT20&dq=Time+sequencing+analysis+network+forensics&hl=en&ei=DijATqaK8_IrQem4fC5AQ&sa=X&oi=book_result&ct=result&resnum=6&ved=0CFMQ6AEwBQ#v=onepage&q&f=false