Network Forensic Analysis in an Encrypted World

Explore network forensic analysis techniques in an encrypted world through this BSidesLV conference talk. Delve into the impact of encryption on network security monitoring, learn how to leverage encrypted traffic metadata, and discover strategies for shifting the balance of power to defenders. Examine hunting techniques, including analyzing asset and request distributions, and send/receive ratios by server name. Investigate the implications of free SSL certificates and their potential for abuse. Gain insights into basic detection and forensics processes, and understand how encryption affects the network security monitoring model. Equip yourself with knowledge to adapt and thrive in an increasingly encrypted digital landscape.