Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensics
- Overview of Kali Linux and its forensic capabilities
- Preparing a laptop for forensic use
- Understanding chain of custody and legal implications
Disk and File System Forensics
- Process for acquiring and imaging disks
- File system analysis using Autopsy and Sleuth Kit
- Techniques for recovering deleted files and hidden data
Memory and Process Analysis
- Capturing volatile memory states
- Investigating active processes and malware presence
- Applying Volatility for in-depth memory analysis
Network Forensics
- Techniques for capturing live network traffic
- Packet analysis using Wireshark and tcpdump
- Tracking intrusion activities and lateral movement
Log and Artifact Analysis
- Reviewing system and application logs
- Identifying artifacts indicative of compromise
- Conducting timeline analysis of security incidents
Incident Investigation Workflow
- Acquiring and validating digital evidence
- Implementing a step-by-step investigation methodology
- Documenting findings for relevant stakeholders
Advanced Tools and Techniques
- Forensic tools for mobile devices within Kali
- Analysis of steganography and encryption
- Automating forensic tasks using scripts
Summary and Future Steps
Requirements
- Fundamental proficiency with the Linux command line
- Working knowledge of cybersecurity concepts
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Incident response team members
- IT security professionals
