Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensics
- Overview of Kali Linux and its specific forensic capabilities
- Preparing a forensic-ready laptop setup
- Understanding chain of custody and relevant legal considerations
Disk and File System Forensics
- Methods for acquiring and imaging disks
- Deep-dive file system analysis using Autopsy and Sleuth Kit
- Techniques for recovering deleted files and uncovering hidden data
Memory and Process Analysis
- Capture strategies for volatile memory
- Investigating active processes and malware behavior
- Leveraging Volatility for comprehensive memory analysis
Network Forensics
- Capturing live network traffic for examination
- Packet-level analysis utilizing Wireshark and tcpdump
- Tracing intrusion activities and detecting lateral movement
Log and Artifact Analysis
- Thorough review of system and application logs
- Identifying key artifacts that indicate compromise
- Performing timeline analysis to reconstruct incident sequences
Incident Investigation Workflow
- Procedures for evidence acquisition and validation
- A structured, step-by-step investigation methodology
- Effectively documenting findings for stakeholders
Advanced Tools and Techniques
- Utilizing mobile device forensic tools within Kali
- Analyzing steganography and encryption methods
- Automating routine forensic tasks through scripting
Summary and Next Steps
Requirements
- Fundamental knowledge of the Linux command line
- Working familiarity with core cybersecurity concepts
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security professionals
