Get in Touch
 Duration 21 hours

Course Outline

Intro to Kali Linux in Forensic Contexts

  • Overview of Kali Linux and its forensic functionalities
  • Preparing a forensic-ready laptop
  • Chain of custody protocols and legal implications

Disk and File System Examination

  • Acquisition and imaging of disks
  • Examining file systems utilizing Autopsy and Sleuth Kit
  • Restoration of deleted files and obscured data

Memory and Process Scrutiny

  • Capture of volatile memory
  • Investigation of processes and malware
  • Application of Volatility for memory examination

Network Forensics

  • Capture of active network traffic
  • Packet analysis using Wireshark and tcpdump
  • Tracking intrusion activities and lateral movement

Log and Artifact Examination

  • Review of system and application logs
  • Detection of compromise artifacts
  • Chronological analysis of incidents

Incident Investigation Process

  • Evidence collection and verification
  • Structured investigation methodology
  • Recording findings for stakeholders

Advanced Instruments and Methods

  • Mobile device forensic utilities within Kali
  • Analysis of steganography and encryption
  • Streamlining forensic tasks through scripting

Concluding Summary and Subsequent Actions

Requirements

  • Fundamental knowledge of the Linux command line
  • Proficiency in core cybersecurity principles
  • Practical experience in incident response or IT security operations

Target Audience

  • Digital forensic analysts
  • Incident response team members
  • IT security experts

Number of participants


Price per participant

Upcoming Courses

Related Categories