Skip to content
Quest Training

Network Forensics & Malware Analysis Training Course

Combines traffic and packet analysis with malware examination to trace suspicious network activity, uncover indicators of compromise and support response.

DFCI · Digital Forensics & Cybercrime InvestigationAll Levels#2525ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Information Technology & CybersecurityCategories:Digital Forensics & Cybercrime Investigation

Course Overview

This advanced practical training course develops the skills required to investigate suspicious network activity and analyse malware-related evidence across enterprise environments. It combines network forensics with malware analysis to help participants understand how malicious activity appears across network traffic, endpoints, systems, and digital artefacts. The programme covers network evidence collection, traffic analysis, packet inspection, network indicators, command-and-control activity, malicious communications, malware behaviour, static and dynamic analysis concepts, indicators of compromise, and evidence correlation. It also addresses investigative workflows for connecting network events with endpoint and malware evidence. Through practical analysis exercises and investigation scenarios, participants learn how to identify suspicious traffic, examine malware-related indicators, reconstruct attack activity, correlate evidence from multiple sources, and produce technically supported findings for incident response and cybersecurity investigations.

Learning Objectives

  • Analyse the principles and methodologies of network forensics and malware analysis.
  • Identify relevant network evidence and preserve it for investigation.
  • Examine network traffic to identify suspicious communications and abnormal activity.
  • Analyse packet captures, network logs, and connection records.
  • Identify indicators associated with malware and malicious network behaviour.
  • Analyse command-and-control communication patterns and related network indicators.
  • Apply fundamental static malware analysis techniques in a controlled environment.
  • Examine malware behaviour using dynamic analysis concepts and controlled execution.
  • Correlate network, endpoint, and malware evidence to reconstruct attack activity.
  • Develop indicators of compromise from network and malware analysis.
  • Document technical findings and investigative evidence.
  • Develop a structured workflow for network forensics and malware-related investigations.

Who Should Attend

This course is designed for cybersecurity analysts, network security professionals, incident responders, digital forensic investigators, SOC analysts, malware analysts, network administrators, and IT security specialists involved in detecting and investigating suspicious network activity. It is also suitable for cybersecurity managers, threat analysts, penetration testing professionals, system administrators, and technical teams responsible for security monitoring, incident investigation, threat detection, and digital evidence analysis. The programme is particularly relevant to organizations operating enterprise networks, critical infrastructure, financial systems, cloud environments, and other technology platforms where rapid identification and investigation of malicious network activity is essential.

Learning Outcomes

  • Explain the role of network forensics and malware analysis within cybersecurity investigations.
  • Identify and preserve network evidence relevant to security incidents.
  • Analyse packet captures and network traffic for suspicious activity.
  • Interpret network logs, connection records, and communication patterns.
  • Identify malware-related indicators within network and system evidence.
  • Recognize command-and-control and other malicious communication patterns.
  • Apply basic static techniques to examine malware characteristics.
  • Analyse malware behaviour in controlled environments.
  • Extract and document relevant indicators of compromise.
  • Correlate network and malware evidence to reconstruct attack sequences.
  • Develop evidence-based technical findings for incident investigations.
  • Apply an integrated methodology for network forensic and malware investigations.

Course Outline

Day 1

Network Forensics Principles & Evidence Collection

  • Network forensics concepts and investigation objectives
  • Sources of network evidence
  • Network traffic and communication records
  • Packet capture and evidence preservation
  • Network logs and connection data
  • Network protocols and communication behaviour
  • Baseline traffic and abnormal activity
  • Evidence integrity and investigation documentation
  • Initial incident assessment
  • Practical Application: Develop a network evidence collection plan and analyse an initial set of network records from a simulated incident
Day 2

Network Traffic Analysis & Attack Investigation

  • Packet analysis principles
  • Network traffic inspection
  • Protocol analysis
  • Identifying abnormal connections and traffic patterns
  • Suspicious DNS, HTTP, email, and other communication activity
  • Network scanning and reconnaissance indicators
  • Lateral movement and suspicious internal communication
  • Data transfer and potential exfiltration indicators
  • Correlation of network events
  • Practical Application: Analyse packet captures and network logs to identify suspicious communications and reconstruct an attack sequence
Day 3

Malware Fundamentals & Static Analysis

  • Malware concepts and common characteristics
  • Malware delivery and infection mechanisms
  • Malware families and behavioural categories
  • Executable and file-based evidence
  • File metadata and structural characteristics
  • Hashes and malware identification
  • Static analysis principles
  • Identifying suspicious strings and indicators
  • Analysing malware-related artefacts without execution
  • Practical Application: Conduct a controlled static examination of a malware sample and extract relevant technical indicators
Day 4

Dynamic Malware Analysis & Network Behaviour

  • Dynamic malware analysis principles
  • Controlled execution environments
  • Observing malware behaviour
  • Process and system activity
  • File and configuration changes
  • Network connections generated by malware
  • Command-and-control behaviour
  • Persistence and execution indicators
  • Correlating malware behaviour with network evidence
  • Practical Application: Analyse controlled malware behaviour and correlate generated network activity with host-based indicators
Day 5

Integrated Investigation, Threat Correlation & Incident Reporting

  • Correlating network and malware evidence
  • Indicators of compromise and threat intelligence
  • Attack timeline reconstruction
  • Identifying malicious infrastructure and communication patterns
  • Investigative hypothesis development
  • Evidence validation and analytical reasoning
  • Documenting technical findings
  • Malware and network investigation reporting
  • Improving detection and response based on forensic findings
  • Final Workshop: Conduct an integrated network forensics and malware investigation covering traffic analysis, malware examination, evidence correlation, attack reconstruction, indicators of compromise, and final technical reporting

Upcoming Dates

Selected date

Riyadh · 25 – 29 Jan 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
GenevaScheduled
2 – 6 Nov 2026€7,300—
SelectDownload Brochure
IstanbulScheduled
9 – 13 Nov 2026€5,300—
SelectDownload Brochure
Kuala LumpurScheduled
16 – 20 Nov 2026€4,700—
SelectDownload Brochure
LondonScheduled
23 – 27 Nov 2026€5,800€5,220until 2 Nov
SelectDownload Brochure
LisbonScheduled
23 – 27 Nov 2026€6,000€5,400until 2 Nov
SelectDownload Brochure
MadridScheduled
30 Nov – 4 Dec 2026€6,000€5,400until 9 Nov
SelectDownload Brochure
MakkahScheduled
7 – 11 Dec 2026€4,800€4,320until 16 Nov
SelectDownload Brochure
ManamaScheduled
14 – 18 Dec 2026€5,300€4,770until 23 Nov
SelectDownload Brochure
MarrakeshScheduled
21 – 25 Dec 2026€4,700€4,230until 30 Nov
SelectDownload Brochure
MilanScheduled
28 Dec 2026 – 1 Jan 2027€7,000€6,300until 7 Dec
SelectDownload Brochure
MuscatScheduled
4 – 8 Jan 2027€6,300€5,670until 14 Dec
SelectDownload Brochure
MunichScheduled
4 – 8 Jan 2027€6,000€5,400until 14 Dec
SelectDownload Brochure
OnlineScheduled
10 – 14 Jan 2027€2,700€2,430until 21 Dec
SelectDownload Brochure
ParisScheduled
18 – 22 Jan 2027€6,700€6,030until 28 Dec
SelectDownload Brochure
RiyadhScheduled
25 – 29 Jan 2027€4,800€4,320until 4 Jan
✓ SelectedDownload Brochure
RomeScheduled
1 – 5 Feb 2027€7,000€6,300until 11 Jan
SelectDownload Brochure
SalalahScheduled
8 – 12 Feb 2027€6,300€5,670until 18 Jan
SelectDownload Brochure
SingaporeScheduled
15 – 19 Feb 2027€8,000€7,200until 25 Jan
SelectDownload Brochure
TrabzonScheduled
22 – 26 Feb 2027€5,300€4,770until 1 Feb
SelectDownload Brochure
TunisiaScheduled
22 – 26 Feb 2027€4,300€3,870until 1 Feb
SelectDownload Brochure
ViennaScheduled
1 – 5 Mar 2027€6,400€5,760until 8 Feb
SelectDownload Brochure
AmmanScheduled
7 – 11 Mar 2027€4,000€3,600until 15 Feb
SelectDownload Brochure
AmsterdamScheduled
15 – 19 Mar 2027€6,000€5,400until 22 Feb
SelectDownload Brochure
BakuScheduled
22 – 26 Mar 2027€5,300€4,770until 1 Mar
SelectDownload Brochure
BarcelonaScheduled
29 Mar – 2 Apr 2027€6,000€5,400until 8 Mar
SelectDownload Brochure
CairoScheduled
5 – 9 Apr 2027€3,800€3,420until 15 Mar
SelectDownload Brochure
CasablancaScheduled
12 – 16 Apr 2027€4,700€4,230until 22 Mar
SelectDownload Brochure
DammamScheduled
12 – 16 Apr 2027€4,800€4,320until 22 Mar
SelectDownload Brochure
DohaScheduled
19 – 23 Apr 2027€4,700€4,230until 29 Mar
SelectDownload Brochure
DubaiScheduled
25 – 29 Apr 2027€4,700€4,230until 5 Apr
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team