Cybersecurity · Intermediate · 10 live learning hours

Certificate of completion

Learners who meet the course participation and practical assessment requirements receive a Solid Elf certificate of completion.

What you will learn

  • Interpret TCP/IP traffic and common malicious network patterns
  • Capture and analyse packets using Wireshark
  • Use display filters to isolate suspicious traffic efficiently
  • Identify indicators consistent with command-and-control, exfiltration and lateral movement
  • Correlate packet evidence with firewall and network logs

Course outline

  1. Session 1: TCP/IP review, baselining and forensic evidence
  2. Session 2: Packet capture, Wireshark workflow and advanced display filtering
  3. Session 3: Beaconing, suspicious DNS and command-and-control indicators
  4. Session 4: Exfiltration, lateral movement and network anomaly analysis
  5. Session 5: Firewall logs, correlation, findings and threat-hunting report

Practical project

Investigate a simulated enterprise network incident from packet captures and logs, then produce a concise threat-hunting findings report.

Before you start

Basic networking knowledge including IP addressing, ports and common protocols. Labs use provided packet captures and controlled training data.

Learning format

10 live learning hours delivered as five 2-hour sessions. Cohort dates and meeting days are agreed during enrolment.

Exercises should use synthetic, de-identified or otherwise authorised material. Do not bring confidential client records or live credentials into a training session.

What the fee includes

Live tuition, guided packet-analysis labs, sample captures, investigation worksheets, feedback and a certificate of completion for learners who meet the participation and assessment requirements. Internet access is not included.

Software and reference material

Explore official reference material ↗. Training is independently offered by Solid Elf; no software-vendor accreditation or certification is claimed unless explicitly stated.

Continue learning

Explore the related consultancy service, browse practical articles, or view our free workshops.