Course Introduction ../C00_M00/module.htm C00_M00 Course Introduction Module Introduction ../C01_M01/module.htm C01_M01 Introduction Understanding Your Role in CND Analysis ../C01_M02/module.htm C01_M02 Introduction Overview of CND Analysis Role of the Analyst Introduction to Analysis Methodology Developing a Narrative Knowledge Check Conclusion An Approach to CND Analysis ../C01_M03/module.htm C01_M03 Introduction Overview of CND Analysis Methodology Phase 1: Data Gathering Phase 2: Knowledge Development Phase 3: Reporting Knowledge Check Conclusion Module Conclusion ../C01_M04/module.htm C01_M04 Summary and Conclusion Module Introduction ../C02_M01/module.htm C02_M01 Introduction NIDS Rule Fundamentals ../C02_M02/module.htm C02_M02 Introduction Need for Custom Rules Components of NIDS Rules Knowledge Check Conclusion NIDS Advanced Rules ../C02_M03/module.htm C02_M03 Introduction Additional Rule Options Rule Modifiers Knowledge Check Conclusion NIDS Rule Optimization ../C02_M04/module.htm C02_M04 Introduction Rule Performance Correlating Information Knowledge Check Conclusion Detecting Worms and Data Exfiltration ../C02_M05/module.htm C02_M05 Introduction Worms and Bots Detecting Data Exfiltration Knowledge Check Conclusion Module Conclusion ../C02_M06/module.htm C02_M06 Summary and Conclusion Course Conclusion ../C03_M00/module.htm C03_M00 Course Conclusion CND Analysis Job Aid: Data Types ../common/cw/data/DISA_IDS_Analysis_CND_Analysis_JobAid_DataTypes.pdf externalWindow CND Analysis Job Aid: Methodology ../common/cw/data/DISA_IDS_Analysis_CND_Analysis_JobAid_Methodology.pdf externalWindow Custom Rules Job Aid: SNORT Classifications ../common/cw/data/DISA_IDS_Analysis_Custom_Rules_Classifications.pdf externalWindow External Resources - http://iase.disa.mil/eta/ids_part3/references/ids_part3_references.html http://iase.disa.mil/eta/ids_part3/references/ids_part3_references.html externalWindow