{"id":706,"date":"2022-01-03T11:25:06","date_gmt":"2022-01-03T11:25:06","guid":{"rendered":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?page_id=706"},"modified":"2022-01-13T14:00:26","modified_gmt":"2022-01-13T14:00:26","slug":"nids-network","status":"publish","type":"page","link":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/","title":{"rendered":"NIDS\/Network"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"706\" class=\"elementor elementor-706\" data-elementor-settings=\"[]\">\n\t\t\t\t\t\t\t<div class=\"elementor-section-wrap\">\n\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e0d0544 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e0d0544\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f591cbc\" data-id=\"f591cbc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1d4935a elementor-widget elementor-widget-spacer\" data-id=\"1d4935a\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0359e77 elementor-widget elementor-widget-heading\" data-id=\"0359e77\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h1 class=\"elementor-heading-title elementor-size-default\">NIDS\/Network<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3d95e6d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3d95e6d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-9b35217\" data-id=\"9b35217\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7c6a47a elementor-widget elementor-widget-heading\" data-id=\"7c6a47a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Definition und Begriff<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ca7d2b elementor-widget elementor-widget-text-editor\" data-id=\"5ca7d2b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Netzwerke resp. der auf ihnen \u00fcbertragene Verkehr k\u00f6nnen nicht direkt forensisch untersucht werden, da sie kein statisches Medium darstellen. Zur Untersuchung von Netzwerkverkehr muss der Datenverkehr mitgeschnitten und analysiert werden. Dazu kann auf Network Intrusion Detection Systems (NIDS) zur\u00fcckgegriffen.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7501c25 elementor-widget elementor-widget-text-editor\" data-id=\"7501c25\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Synonyme Begriffe: Intrusion Detection System (IDS), NIPS (Network Intrusion Prevention System), Security Information and Event Management (SIEM), Netzwerksniffer, Traffic Analyzer.<\/p>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ca41b84\" data-id=\"ca41b84\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4362ae4 elementor-widget elementor-widget-page-title\" data-id=\"4362ae4\" data-element_type=\"widget\" data-widget_type=\"page-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t<div class=\"hfe-page-title hfe-page-title-wrapper elementor-widget-heading\">\n\n\t\t\t\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tOverview: \t\t\t\t\tNIDS\/Network  \n\t\t\t<\/h6 > \n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4adb48a elementor-widget elementor-widget-shortcode\" data-id=\"4adb48a\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat27 level0\"><!-- Div Category --><div id=\"quick-links\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Quick Links<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/de.wikipedia.org\/wiki\/Rechnernetz\" id=\"link-2005\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">Wikipedia zu Netzwerken<\/a><\/li>\n<li><a href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/uploads\/2022\/01\/SANS-Cheat-Sheet-IPv6.pdf\" id=\"link-2003\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">SANS Cheat Sheet &#8220;IPv6&#8221;<\/a>\n(<a href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/uploads\/2022\/01\/SANS-Cheat-Sheet-IPv6.pdf\" id=\"link-2003\" class=\"track_this_link\" >Mirror<\/a>)<\/li>\n<li><a href=\"https:\/\/sansorg.egnyte.com\/dl\/8VIrX1K87d\/?\" id=\"link-2004\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">SANS Cheat Sheet &#8220;TCP\/IP and tcpdump&#8221;<\/a>\n(<a href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/uploads\/2022\/01\/SANS-Cheat-Sheet-TCP-IP.pdf\" id=\"link-2004\" class=\"track_this_link\" >Mirror<\/a>)<\/li>\n<li><a href=\"https:\/\/assets.contentstack.io\/v3\/assets\/blt36c2e63521272fdc\/blte37ba962036d487b\/5eb08aae26a7212f2db1c1da\/NmapCheatSheetv1.1.pdf\" id=\"link-2061\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">SANS Cheat Sheet &#8220;Nmap&#8221;<\/a>\n(<a href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/uploads\/2022\/01\/SANS-Cheat-Sheet-Nmap.pdf\" id=\"link-2061\" class=\"track_this_link\" >Mirror<\/a>)<\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1953325 elementor-widget elementor-widget-shortcode\" data-id=\"1953325\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat8 level0\"><!-- Div Category --><div id=\"data-sources\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Data Sources<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0037\" id=\"link-1411\" class=\"track_this_link \" rel=\"noopener noreferrer\">Certificate (DS0037)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0025\" id=\"link-1412\" class=\"track_this_link \" rel=\"noopener noreferrer\">Cloud Service (DS0025)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0038\" id=\"link-1417\" class=\"track_this_link \" rel=\"noopener noreferrer\">Domain Name (DS0038)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0018\" id=\"link-1421\" class=\"track_this_link \" rel=\"noopener noreferrer\">Firewall (DS0018)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0035\" id=\"link-1426\" class=\"track_this_link \" rel=\"noopener noreferrer\">Internet Scan (DS0035)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0033\" id=\"link-1432\" class=\"track_this_link \" rel=\"noopener noreferrer\">Network Share (DS0033)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0029\" id=\"link-1433\" class=\"track_this_link \" rel=\"noopener noreferrer\">Network Traffic (DS0029)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0013\" id=\"link-1439\" class=\"track_this_link \" rel=\"noopener noreferrer\">Sensor Health (DS0013)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0034\" id=\"link-1443\" class=\"track_this_link \" rel=\"noopener noreferrer\">Volume (DS0034)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0006\" id=\"link-1444\" class=\"track_this_link \" rel=\"noopener noreferrer\">Web Credential (DS0006)<\/a><\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9933a31 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9933a31\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-bdf1a42\" data-id=\"bdf1a42\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0c1a6ee elementor-widget elementor-widget-heading\" data-id=\"0c1a6ee\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Praktische Relevanz<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f39ed9a elementor-widget elementor-widget-heading\" data-id=\"f39ed9a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Fundorte<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-180ce1f\" data-id=\"180ce1f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3bdf616 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3bdf616\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-acba6bb\" data-id=\"acba6bb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7cead84 elementor-widget elementor-widget-heading\" data-id=\"7cead84\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Praktische Vorgehensweise \/ Beweissicherungsprinzipien<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-e06d72f\" data-id=\"e06d72f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a640420 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a640420\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-b737815\" data-id=\"b737815\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c3119a7 elementor-widget elementor-widget-shortcode\" data-id=\"c3119a7\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4313caf elementor-widget elementor-widget-heading\" data-id=\"4313caf\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Weitere Materialien<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-650ad92 stax-condition-yes stax-user_role_enabled-yes elementor-widget elementor-widget-text-editor\" data-id=\"650ad92\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><a href=\"https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Log-File\" target=\"_blank\" rel=\"noopener\">https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Log-File<\/a><\/li><li><a href=\"https:\/\/forensicswiki.xyz\/page\/Windows_Event_Log_(EVT)\" target=\"_blank\" rel=\"noopener\">https:\/\/forensicswiki.xyz\/page\/Windows_Event_Log_(EVT)<\/a><\/li><li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Log_analysis\" target=\"_blank\" rel=\"noopener\">https:\/\/en.wikipedia.org\/wiki\/Log_analysis<\/a><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-a7d720d\" data-id=\"a7d720d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>NIDS\/Network Definition und Begriff Netzwerke resp. der auf ihnen \u00fcbertragene Verkehr k\u00f6nnen nicht direkt forensisch untersucht werden, da sie kein statisches Medium darstellen. Zur Untersuchung von Netzwerkverkehr muss der Datenverkehr mitgeschnitten und analysiert werden. Dazu kann auf Network Intrusion Detection Systems (NIDS) zur\u00fcckgegriffen. Einpflegen: mitre datasources Vorlesung CRS SW14-Mathias fuchs, Mathias fuchs auch noch auf [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1000,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":[],"yoast_head":"<title>NIDS\/Network - forensics.cyber-kill-chain.ch<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIDS\/Network - forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"og:description\" content=\"NIDS\/Network Definition und Begriff Netzwerke resp. der auf ihnen \u00fcbertragene Verkehr k\u00f6nnen nicht direkt forensisch untersucht werden, da sie kein statisches Medium darstellen. Zur Untersuchung von Netzwerkverkehr muss der Datenverkehr mitgeschnitten und analysiert werden. Dazu kann auf Network Intrusion Detection Systems (NIDS) zur\u00fcckgegriffen. Einpflegen: mitre datasources Vorlesung CRS SW14-Mathias fuchs, Mathias fuchs auch noch auf [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/\" \/>\n<meta property=\"og:site_name\" content=\"forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-13T14:00:26+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\",\"name\":\"forensics.cyber-kill-chain.ch\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"de-CH\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#webpage\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/\",\"name\":\"NIDS\/Network - forensics.cyber-kill-chain.ch\",\"isPartOf\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\"},\"datePublished\":\"2022-01-03T11:25:06+00:00\",\"dateModified\":\"2022-01-13T14:00:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#breadcrumb\"},\"inLanguage\":\"de-CH\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Kill Chain Forensics | LAYER 8\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"NIDS\/Network\"}]}]}<\/script>","yoast_head_json":{"title":"NIDS\/Network - forensics.cyber-kill-chain.ch","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/","og_locale":"de_DE","og_type":"article","og_title":"NIDS\/Network - forensics.cyber-kill-chain.ch","og_description":"NIDS\/Network Definition und Begriff Netzwerke resp. der auf ihnen \u00fcbertragene Verkehr k\u00f6nnen nicht direkt forensisch untersucht werden, da sie kein statisches Medium darstellen. Zur Untersuchung von Netzwerkverkehr muss der Datenverkehr mitgeschnitten und analysiert werden. Dazu kann auf Network Intrusion Detection Systems (NIDS) zur\u00fcckgegriffen. Einpflegen: mitre datasources Vorlesung CRS SW14-Mathias fuchs, Mathias fuchs auch noch auf [&hellip;]","og_url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/","og_site_name":"forensics.cyber-kill-chain.ch","article_modified_time":"2022-01-13T14:00:26+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/","name":"forensics.cyber-kill-chain.ch","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"de-CH"},{"@type":"WebPage","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#webpage","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/","name":"NIDS\/Network - forensics.cyber-kill-chain.ch","isPartOf":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website"},"datePublished":"2022-01-03T11:25:06+00:00","dateModified":"2022-01-13T14:00:26+00:00","breadcrumb":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#breadcrumb"},"inLanguage":"de-CH","potentialAction":[{"@type":"ReadAction","target":["https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/nids-network\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":2,"name":"Cyber Kill Chain Forensics | LAYER 8","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":3,"name":"NIDS\/Network"}]}]}},"_links":{"self":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/706"}],"collection":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/comments?post=706"}],"version-history":[{"count":61,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/706\/revisions"}],"predecessor-version":[{"id":2645,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/706\/revisions\/2645"}],"up":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/1000"}],"wp:attachment":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/media?parent=706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}