Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensic Contexts
- Overview of Kali Linux and its forensic capabilities
- Preparing a laptop for forensic readiness
- Understanding chain of custody and legal implications
Forensic Analysis of Disks and File Systems
- Acquiring and imaging disk data
- Examining file systems using Autopsy and Sleuth Kit
- Recovering deleted files and uncovering hidden data
Memory and Process Investigation
- Capturing volatile memory states
- Investigating active processes and malware presence
- Utilizing Volatility for in-depth memory analysis
Network Forensics
- Capturing live network traffic data
- Analyzing network packets with Wireshark and tcpdump
- Tracing intrusion activities and lateral movement patterns
Log and Digital Artifact Analysis
- Reviewing system and application logs
- Identifying artifacts indicative of compromise
- Conducting timeline analysis of security incidents
Incident Investigation Workflow
- Evidence acquisition and validation procedures
- Step-by-step methodology for investigations
- Documenting findings for key stakeholders
Advanced Tools and Techniques
- Mobile device forensic tools available in Kali
- Analysis of steganography and encryption
- Automating forensic tasks through scripting
Summary and Future Directions
Requirements
- Foundational knowledge of the Linux command line
- Working familiarity with core cybersecurity concepts
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Incident response team members
- IT security professionals
