Freewater NFA -Network Forensic Analysis

The NFA course is a lab-intensive course designed for technicians involved with incident response, traffic analysis or security auditing. The certification exam is an actual practical lab requiring candidates to follow procedures and apply industry standard methods to detect and identify attacks.

NFA was designed to partner with courses like CEH (Certified Ethical Hacker) in mind in order to provide experience detecting the attacks a student may have seen or read about in the past. By no means is CEH a requirement for NFA, but the two go very well together: attack in one course, detect in the other.

NFA is a continuously evolving course, rarely repeating the exact same captures or attacks. Many courses update their curriculum only after a large period of time, perhaps even years. NFA is committed to using the most recent attacks that real-world analysts are currently experiencing. While certain “historical” attacks are discussed in the course, students will analyze captures of attacks that are as current as a few weeks.