Network Security

Network Fundamentals & Network Threats

Start your network security journey with Network Security Beginner.

• •OSI/TCP-IP model: security-relevant protocols (TCP, UDP, DNS, HTTP, TLS)
• •Network threat landscape: reconnaissance, lateral movement, C2, exfiltration
• •Essential tools: Wireshark, tcpdump, Nmap

Network Capture Analysis with Wireshark

• •Display and capture filters: BPF syntax and Wireshark filters
• •TCP/UDP stream following: conversation reconstruction
• •Identifying scans, fuzzing, and exploitation patterns in pcap

Intrusion Detection with Suricata & Zeek

• •NIDS architecture: rules, alerts, logs
• •Writing basic Suricata rules to detect known IOCs
• •Analyzing Zeek logs: conn.log, dns.log, http.log, ssl.log

Hardening & Response + Certification Exam

• •Basic network hardening: segmentation, ACLs, least privilege
• •Building a network incident report: timeline, IOCs, recommendations

Advanced Network Analysis & Threat Hunting

Advance into complex scenarios with Network Security Intermediate.

• •Encrypted traffic analysis: JA3/JA3S fingerprinting and TLS metadata
• •DNS tunneling and covert channel detection techniques
• •Network-based threat hunting: hypothesis-driven and indicator-based

Advanced IDS Engineering with Suricata

• •Complex Suricata rule writing: flowbits, thresholds, and lua scripting
• •Performance tuning: rule optimization and suppression strategies
• •Integration with SIEM: alert enrichment and correlation

Zeek Scripting & Network Forensics

• •Zeek scripting language: custom analyzers and detection scripts
• •File extraction and protocol analysis from network captures
• •Lateral movement detection: SMB, RDP, and WMI traffic patterns

Incident Report + Intermediate Certification

• •Comprehensive network incident report: timeline, kill chain mapping
• •Detection engineering recommendations and network hardening plan