Forensic networking courses and workshops are available to individuals employed in law enforcement, computer networking, computer forensics, and to students taking a related college-level program. Course length varies from a five-day program for continuing-education credit to a full semester, as part of an undergraduate program.
Topics discussed in a five-day program include DNS tunneling, passive evidence acquisition, network log analysis and network intrusion detection. Topics in the full semester program include cyber-forensic tools, network surveillance, and network attack trace-back and attribution.
Individuals participating in a short course take part in a mock investigation to evaluate their newly acquired knowledge and techniques, whereas undergraduate students are assessed through course projects, presentations, term papers and written examinations.