National CAE Designated Institution
  • Classroom

This course is designed to provide advanced understanding of protocol analysis. Topics include advanced network protocol security analysis, data parsing, monitoring scanning logs, and network intrusion identification. Upon completion, students should be able to apply best practices in protocol analysis and apply the results to IT security frameworks.

Learning Objectives

  • Create troubleshooting profiles within Wireshark
  • Sort captured traffic based on troubleshooting factors
  • Spot timing delays within protocols and applications
  • Create graphical charts based on captured data
  • Plot statistical data
  • Identify errors within packets
  • Create reports based on collected data

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Exploitation Analysis
  • Incident Response
  • Network Services

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.