Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux for Forensics
- Overview of Kali Linux and its specific forensic capabilities
- Preparing a laptop for forensic readiness
- Understanding chain of custody and associated legal implications
Disk and File System Forensics
- Techniques for acquiring and imaging storage disks
- Examining file systems using Autopsy and the Sleuth Kit
- Restoring deleted files and uncovering hidden data
Memory and Process Analysis
- Methdods for capturing volatile memory
- Investigating running processes and malware presence
- Applying Volatility for detailed memory analysis
Network Forensics
- Recording live network traffic for examination
- Inspecting packets using Wireshark and tcpdump
- Tracking intrusion activities and instances of lateral movement
Log and Artifact Analysis
- Assessing system and application log entries
- Detecting artifacts indicating system compromise
- Conducting timeline analysis of security incidents
Incident Investigation Workflow
- Securing and validating digital evidence
- Following a structured, step-by-step investigation methodology
- Documenting findings for key stakeholders
Advanced Tools and Techniques
- Forensic tools for mobile devices within Kali
- Analysis of steganography and encryption methods
- Automating forensic tasks through scripting
Summary and Next Steps
Requirements
- Foundational knowledge of the Linux command line interface
- Working familiarity with core cybersecurity principles
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security professionals
