- Welcome to lesson 10, Network Intrusion Analysis.
This lesson starts by introducing
intrusion analysis fundamentals,
examining packet captures and protocol headers.
You will learn how to analyze security device data
and the differences between false positives,
false negatives, true positives and true negatives.
You will learn how to compare inline traffic interrogation
and taps or traffic monitoring.
You will also learn how to extract files
from a TCP stream when given a packet capture file
in Wireshark and interpret common artifact elements
from an event to identify an alert.