From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep (2024)

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Network symptoms

Network symptoms

From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep (2024)

Start my 1-month free trial Buy for my team

Network symptoms

“

- [Instructor] As a cybersecurity analyst, you need to be familiar with many of the signs and symptoms of a security incident. This information can help you identify that an incident is taking place and also point you down the right avenues of investigation during incident analysis. Just like a physician takes a patient's vital signs and asks about physical symptoms when trying to diagnose a disease, security professionals must look at the signs and symptoms on their networks when diagnosing a security incident. Network traffic is a common source of valuable information about security incidents. Firewall logs, NetFlow records, and data from network performance monitoring tools may play a valuable role in diagnosing a security incident. As a cybersecurity analyst, you should practice reviewing these logs. Make sure that you don't only look at summaries of logs. You should also be capable of digging into the records produced by the systems on your network and performing manual log…

Contents