NetflOSINT- Taking an Often-Overlooked Data Source and Operationalizing It - Joe Gray - Hack in Paris

This course aims to teach learners how to operationalize Netflow data for network forensics analysis. The learning outcomes include understanding Netflow, extracting Netflow data from PCAPs, and utilizing various analysis methods for efficient and in-depth investigation. The course covers skills such as compression, filtering, generating CSV files, and using tools like SoftElk, Thread Hunt, and Jupiter for analysis. The teaching method involves a lecture-style presentation with a demo. This course is intended for individuals interested in network forensics, cybersecurity, and leveraging Netflow data for investigative purposes.