Network Scanning
Ric Messier · 2017
A common way for attackers to get into systems is through vulnerabilities. This chapter talks about vulnerability scanners. This may be a way of seeing whether there are vulnerabilities that an attacker has either already taken advantage of, which can help the network forensic practitioners to identify a way in, or identify an avenue of potential attack. Attackers can obscure their access attempts in some ways so they do not look like attacks. One way to do this is through tunneling. There are different tunneling protocols that are designed to carry data from one location to another. The Point to Point Tunneling Protocol (PPTP) is one of these. The best place to gather information is from the network. While the practitioners may want to actively gather data using techniques like port scans, it is also possible to passively gather data about hosts.