CORE DOMAIN -TOP LEVELSEC.NET

Network Security & Protocol Analysis

Packet-level analysis of TCP/IP, Ethernet, and DNS protocols, packet capture triage, network telemetry, routing controls, and flood attack detection.

Constituent Capability Skills (6)

Identifying SYN flood exhaustion, ARP cache poisoning, and amplification attacks using flow metrics and intrusion detection signatures.

SEC.NET.DNS_SECURITY

2 Obj

Detecting DNS exfiltration, tunneling beacons, and spoofed responses while validating DNSSEC cryptographic signature chains.

View Details

Configuring stateful packet filtering with iptables and nftables to restrict unauthorized ingress and lateral movement paths.

Evaluating TLS cipher suite handshakes, certificate revocation lists (CRL/OCSP), HSTS enforcement, and encrypted web traffic.

Extracting binary streams, diagnosing protocol anomalies, and reconstructing sessions from PCAP files using tcpdump and Wireshark.

Tracking TCP three-way handshake transitions, sequence numbers, window scaling, and abnormal flag combinations in network traffic.