// Author

Chris Sanders's cybersecurity books

Chris Sanders is a security analyst and educator, author of Practical Packet Analysis and Applied Network Security Monitoring. He writes for defenders who need to read what's actually on the wire.

  1. 01 · 2017

    Practical Packet Analysis

    Using Wireshark to Solve Real-World Network Problems

    Chris Sanders' working manual for Wireshark, geared at troubleshooting and incident response rather than abstract protocol theory. Updated for Wireshark 2.x.

    Beginner
    4/5· Networking· Protocol Analysis· Defensive
  2. 02 · 2013

    Applied Network Security Monitoring

    Collection, Detection, and Analysis

    A practitioner's walkthrough of building an NSM capability end to end, from deciding what to collect through detection and the analysis workflow that ties it together. The tooling is dated, but the way it teaches you to think about monitoring is not.

    Intermediate
    4/5· Detection· Networking· Defensive