Earners of this badge can reconstruct event timelines from network traffic and accurately correlate, or distinguish between, event threads. They have the skills to identify and extract network artifacts for further forensic analysis and perform packet analysis and open-source research to attribute activity to a user or network.

• Type Learning
• Level Intermediate
• Time Days
• Cost Paid