In this class, we will go beyond the fundamentals of how IP communicates and dive into the subtle nuances. This will help the student identify anomalous patterns when they occur.

One of the core disciplines of security is understanding how systems communicate over the Internet. This skill set is crucial to spotting abnormal behavior and attack patterns.

Much of this class is spent focusing on the IP, ICMP, UDP, and TCP headers. We will step through each of the fields within each header to ensure that the student understands how the data within that field plays a role in communications. This knowledge is deepened by observing the behavior in packet decodes, some of which are normal traffic while some are common attacks.

This class assumes that you are new to decoding network traffic. There are no prerequisites beyond being able to load and run a virtual machine (VM) on your system and some familiarity with working at the command line. The class is filled with hands-on exercises, many of which are walk-throughs of packet decoding tools that will guide you through the process. Full labs are then used to reinforce what you have learned.

Virtual (Sep 10th – Sep 13th)

September 10th – 11:00 AM to 4 PM EST
September 11th – 12:00 PM to 4 PM EST
September 12th – 12:00 PM to 4 PM EST
September 13th – 12:00 PM to 4 PM EST

Key Takeaways

The goal is to give the student a foundational knowledge of IP communications that they can immediately apply to their daily workflows.

Who Should Take This Course

Beginner, Junior Analysts and Network Engineers

Audience Skill Level

Everyone!

Student Requirements

There are no prerequisites beyond being able to load and run a virtual machine (VM) on your system and some familiarity with working at the command line.

What Each Student Should Bring

A desire to learn and lots of questions!

Live & Virtual Event

Collaborative interaction with Instructor and fellow students through the Antisyphon Discord class channel
Access to course slides for future reference
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge

On Demand Training

Train at your own pace with no set course schedule
Access to all course resources, including slides and VMs
Subject Matter Expert support through Discord
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge