Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux for Forensics
- Overview of Kali Linux and its forensic capabilities
- Configuring a forensic-ready laptop
- Understanding chain of custody and legal implications
Disk and File System Forensics
- Techniques for acquiring and imaging disks
- Examining file systems using Autopsy and Sleuth Kit
- Restoring deleted files and uncovering hidden data
Memory and Process Analysis
- Methods for capturing volatile memory
- Investigating active processes and malware signatures
- Leveraging Volatility for in-depth memory analysis
Network Forensics
- Recording live network traffic
- Inspecting packets with Wireshark and tcpdump
- Tracking intrusion patterns and lateral movement
Log and Artifact Analysis
- Examining system and application logs
- Recognizing artifacts indicative of a compromise
- Conducting timeline analysis of incident events
Incident Investigation Workflow
- Procedures for evidence acquisition and validation
- Applying a structured step-by-step investigation methodology
- Documenting findings for relevant stakeholders
Advanced Tools and Techniques
- Utilizing mobile device forensic tools within Kali
- Analyzing steganography and encryption techniques
- Automating routine forensic tasks through scripting
Summary and Next Steps
Requirements
- Fundamental knowledge of the Linux command line
- Working familiarity with core cybersecurity concepts
- Professional experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
