Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensics
- Overview of Kali Linux and its forensic capabilities
- Setting up a forensic-ready laptop
- Understanding chain of custody and legal implications
Disk and File System Forensics
- Process of acquiring and imaging disks
- File system analysis using Autopsy and Sleuth Kit
- Techniques for recovering deleted files and uncovering hidden data
Memory and Process Analysis
- Mechanisms for capturing volatile memory
- Investigating active processes and malware presence
- Applying Volatility for in-depth memory analysis
Network Forensics
- Methods for capturing live network traffic
- Packet analysis utilizing Wireshark and tcpdump
- Tracking intrusion activities and lateral movement
Log and Artifact Analysis
- Reviewing system and application logs
- Recognizing artifacts indicative of compromise
- Conducting timeline analysis of security incidents
Incident Investigation Workflow
- Evidence acquisition and verification procedures
- Step-by-step methodology for investigations
- Documenting findings effectively for stakeholders
Advanced Tools and Techniques
- Mobile device forensic tools available in Kali
- Analyzing steganography and encryption methods
- Automating forensic tasks through scripting
Summary and Future Directions
Requirements
- Fundamental knowledge of the Linux command line interface
- Basic familiarity with cybersecurity principles
- Prior experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
