Learning by Practicing – Mastering TShark Network Forensics: Moving From Zero to Hero

The book you have been waiting for to make you a Master of TShark Network Forensics, is finally here!!! Be it you are a Network Engineer, a Network Forensics Analyst, someone new to packet analysis or someone who occasionally looks at packet, this book is guaranteed to improve your TShark skills, while moving you from Zero to Hero.

Mastering TShark Network Forensics, can be considered the definitive repository of practical TShark knowledge. It is your one-stop shop for all you need to master TShark, with adequate references to allow you to go deeper on peripheral topics if you so choose.

Book Objectives:

Introduce packet capturing architecture
Teach the basics of TShark
Teach some not so basic TShark tricks
Solve real world challenges with TShark
Identify services hiding behind other protocols
Perform “hands-free” packet capture with TShark
Analyze and decrypt TLS encrypted traffic
Analyze and decrypt WPA2 Personal Traffic
Going way beyond – Leveraging TShark and Python for IP threat intelligence
Introduce Lua scripts
Introduce packet editing
Introduce packet merging
Introduce packet rewriting
Introduce remote packet capturing

Who is this book for?While this book is written specifically for Network Forensics Analysts, it is equally beneficial to anyone who supports the network infrastructure. This means, Network Administrators, Security Specialists, Network Engineers, etc., will all benefit from this book.
Considering the preceding, I believe the following represents the right audience for this book:

Individuals starting off their Cybersecurity careers
Individuals working in a Cyber/Security Operations Center (C/SOC)
General practitioners of Cybersecurity
Experienced Cybersecurity Ninjas who may be looking for a trick or two
Anyone who just wishes to learn more about TShark and its uses in network forensics
Anyone involved in network forensics
More importantly, anyhow who is looking for a good read

Not sure if this book is for you? Take a glimpse at the sample chapter before committing to it. Mastering TShark sample chapters can be found at:
https://bit.ly/TShark

All PCAPS used within this book can be found at:
https://github.com/SecurityNik/SUWtHEh-
As an addition to this book, the tool,
pktIntel: Tool used to perform threat intelligence against packet data can be found at:

https://github.com/SecurityNik/pktIntel