Hero Banner

Network Forensics Training Course

Master the science of retrieving information within a networked environment with this course focussed on Network Forensics

We have trained over 750 organizations including:

Fully explains the importance of evidence from Network Forensics

An intensive practical training focussed on hands-on lab sessions

Covers all protocols & tools that are critical to Network Forensics

Enables mastery over the Network Forensics investigative process


Network Forensics is a fast-growing and vital subcategory of digital forensics. It equips you to discover and retrieve information about a cybercrime within a networked environment.

This course prepares you with the fundamentals of network forensics and then moves on to show you how to use the tools and protocols for real-world application.

It’s a hands-on training course that will show you how to unlock the true power of Network Forensics in a world riddled with cybercrime.

Benefits of the Network Forensics Training Course

  • Learn how to monitor and analyse computer network traffic.

  • Build skills in one of the most relevant fields of information security and digital forensics.

  • Gain practical experience in using tools to solve Network Forensics challenges.

network forensics (1)


Network Forensics Course Learning Objectives:

After the completion of this course, you will be able to: 

  • Explain in your own words what Network Forensics is all about including its principles and challenges.

  • Offer a detailed explanation of how evidence from Network Forensics is used and by what roles and functions.

  • Enhance your knowledge of Network Forensics protocols used most commonly like NBNS, HTTP, Kerberos etc. 

  • Comprehend how to use tools like Wireshark.

  • Fully grasp how to capture, record and analyse events on a network.

  • Understand and explain how to look for abnormalities, how to analyse them and make decisions. .

  • Comprehend Evidence Collection rules.

  • Enhance your knowledge of criteria for admissibility of novel scientific evidence.

  • Articulate the complete Network Forensics investigative process.

Feedback and Testimonials for our Courses

Kevin Hayes
The playbooks training course was a good 'part-2' to the CIPR and went into greater depth in a number of areas. The day was fun and Amar kept us moving along at a good pace.
Kevin Hayes
CISO, Cyber Risk Associates
Russ Smith

Enjoyed the course. Good mix of attendees and plenty of lively conversation. Amar steered us through it all admirably.

Russ Smith
Kim Rose

Overall the course was very good. I would strongly recommend this training to anyone who is involved in Cyber Security or has control of information assets.

Kim Rose
Information Governance Officer, Wye Valley NHS Trust
Philipp Scheiwiler

It was a great workshop with a lot of interesting people and a great learning experience.

Philipp Scheiwiler
System Engineer
Andrew Lock
This was a very helpful day and opportunity to speak with a number of operational incident responders to discuss what really works in practice and not just in theory. I gained a great deal from the day, particularly around the construction of bespoke playbooks and also a variety of useful resources to inform my learning. A really good day.
Andrew Lock
Information Security Consultant

Network Forensics Course Modules 

Network Forensics
  • Introduction to Network Forensics. Principles and Challenges.

  • Evidence Collection. Evidence Collection Rules. 

  • Network Forensics Tools and Protocols. 

  • Abnormalities. 

  • Network Forensics Investigative Process. 

All trademarks, service marks, trade names, product names, service names and logos appearing on the site, or on printed or digital material are the property of their respective owners, including in Cyber Management Alliance Ltd. Any rights not expressly granted herein are reserved.

Building and Optimising Incident Response Playbooks

Find out more about our one day public courses or internal workshops, please complete the form below. 

  • callOr call us on:
  • +44 (0) 203 189 1422