Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensics
- Overview of Kali Linux and its forensic features
- Configuring a forensic-ready laptop
- Chain of custody protocols and legal implications
Forensic Analysis of Disks and File Systems
- Acquiring and imaging disk data
- Examining file systems using Autopsy and the Sleuth Kit
- Restoring deleted files and uncovering hidden data
Memory and Process Examination
- Capturing volatile memory states
- Investigating active processes and malware presence
- Applying Volatility for detailed memory analysis
Network Forensics
- Recording live network traffic
- Inspecting packets with Wireshark and tcpdump
- Tracking intrusion methods and lateral movement
Analysis of Logs and Artifacts
- Reviewing system and application logs
- Detecting indicators of compromise
- Performing timeline analysis of incidents
Workflow for Incident Investigation
- Collection and verification of evidence
- Methodology for step-by-step investigations
- Documenting findings for key stakeholders
Advanced Tools and Techniques
- Forensic tools for mobile devices within Kali
- Analysis of steganography and encryption
- Automating forensic tasks via scripting
Conclusion and Future Steps
Requirements
- Foundational knowledge of the Linux command line
- Understanding of core cybersecurity principles
- Background in incident response or IT security operations
Target Audience
- Digital forensic specialists
- Members of incident response teams
- IT security practitioners
