NITROstudentV1信息安全培训.pdfVIP

NationalComputerForensicsInstitute

NITRO

NetworkIntrusion

ResponderProgram

Volume1of2

CourseIntroduction

ClassificationInformationcontainedinthisinstructionisUNCLASSIFIED.

However,certainmethodologiesareLawEnforcementSensitive.

IntroductionNITROisathree-weekcourseconsistingof14daysoflessons,

incrementalpracticalexamsandafinalpracticalexam.

ObjectiveofthisNITROisdesignedtointroducetheofficertobasicnetwork

Courseintrusioninvestigationtechniques.

LearningAftercompletingthiscoursethetrainedofficershouldbeableto

Outcomessuccessfullyconductanetworkintrusioninvestigation.

CourseProtocolsInformationcontainedineachsectionofthisstudentbookis

presentedinsequentialordersothatknowledgegainedfromlater

lessonsisbuiltonafoundationofwhatwaslearnedearlier.Other

courseprotocolsincludethefollowing:

Practicalexercises–Instructorswillprovidedirectivesand

handoutsforpracticalexercisescompletedinthelab.

Appendices–Includecourserelatedmaterialsprovidedbythe

instructors.

PracticalExercisesPracticalexercisesinNITROarehands-on.Eachexerciseis

instructor-directed.Intheexercises,studentswill:

Performnetworkwiringandconnectingactivities

Conductmanualloganalysis

Useautomatedloganalysistools

Perform“Live”networkgatheringandanalysisactivities

Inaddition,everymorningthestudentswillhaveanopp