Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of Kali Linux in Forensics
- Overview of Kali Linux and its forensic capabilities
- Setting up a forensic-ready laptop
- Understanding chain of custody and legal implications
Forensic Analysis of Disks and File Systems
- Process of disk acquisition and imaging
- File system examination using Autopsy and Sleuth Kit
- Recovery of deleted files and concealed data
Memory and Process Examination
- Capture of volatile memory
- Investigation of processes and malware threats
- Application of Volatility for memory analysis
Network Forensic Investigations
- Live capture of network traffic
- Packet analysis utilizing Wireshark and tcpdump
- Tracking intrusion activities and lateral movement
Log and Artifact Examination
- Review of system and application logs
- Identification of compromise artifacts
- Conducting timeline analysis of incidents
Workflow for Incident Investigation
- Evidence acquisition and verification
- Step-by-step investigative methodology
- Documentation of findings for stakeholders
Advanced Tools and Methodologies
- Forensic tools for mobile devices within Kali
- Analysis of steganography and encryption
- Automation of forensic tasks through scripting
Conclusion and Future Pathways
Requirements
- Foundational knowledge of the Linux command line
- Acquaintance with cybersecurity principles
- Background in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
