Network Forensics: A Comprehensive Review of Tools and Techniques

Abstract

With the evolution and popularity of computer networks, a tremendous amount of devices are increasingly being added to the global internet connectivity. Additionally, more sophisticated tools, methodologies, and techniques are being used to enhance global internet connectivity. It is also worth mentioning that individuals, enterprises, and corporate organizations are quickly appreciating the need for computer networking. However, the popularity of computer and mobile networking brings various drawbacks mostly associated with security and data breaches. Each day, cyber-related criminals explore and devise complicated means of infiltrating and exploiting individual and corporate networks' security. This means cyber or network forensic investigators must be equipped with the necessary mechanisms of identifying the nature of security vulnerabilities and the ability to identify and apprehend the respective cyber-related offenders correctly. Therefore, this research's primary focus is to provide a comprehensive analysis of the concept of network forensic investigation and describing the methodologies and tools employed in network forensic investigations by emphasizing on the study and analysis of the OSCAR methodology. Finally, this research provides an evaluative analysis of the relevant literature review in a network forensics investigation.

Comprehensive Study of Network Forensic

“…Reporting is the most vital part of network forensic because it will show the results of all this investigation. The report should be clear and understandable by any non-technical person [15].…”

Drone Forensics: An Innovative Approach to the Forensic Investigation of Drone Accidents Based on Digital Twin Technology

“…Network Forensics [30] Can detect suspicious network activity. Provides details about a drone's communication with other devices.…”

Leveraging Digital Forensics in the Age of Smart Grids: A Survey of Tools and Techniques for Securing Electrical Power Systems

“…The analysis included the tools Wireshark, Ettercap, Etherape, Kismet, Network Miner, TcpDump, WinDump, Cloud Shark, Colasoft Capsa, Sysdig, Debokee, Etheral, Intercepter NG, Nethogs, MNM, SmartSniff, PacketSled, Scapy, Cain and Abel, Savvius Omnipeek, Packet Peeker, CPA, KisMac. In [12], the authors reviewed the OSCAR methodology and the tools and techniques for network forensics. The tools included were Wireshark, Tshark, Dumpcap, and NFATs.…”