Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of Kali Linux in Forensics
- Overview of Kali Linux and its forensic capabilities
- Configuring a forensic-ready laptop
- Understanding chain of custody and legal implications
Forensic Analysis of Disks and File Systems
- Methods for acquiring and imaging disks
- Examining file systems using Autopsy and the Sleuth Kit
- Restoring deleted files and uncovering hidden data
Memory and Process Investigation
- Techniques for capturing volatile memory
- Examining active processes and malware behavior
- Applying Volatility for in-depth memory analysis
Network Forensic Examination
- Recording live network traffic
- Packet analysis using Wireshark and tcpdump
- Tracking intrusion patterns and lateral movement
Log and Artifact Examination
- Scrutinizing system and application logs
- Detecting signs of compromise through artifacts
- Constructing a chronological timeline of incidents
Incident Investigation Procedures
- Validating and acquiring evidence
- Applying a structured investigation methodology
- Documenting results for relevant stakeholders
Advanced Tools and Methodologies
- Mobile device forensic utilities within Kali
- Analyzing steganography and encryption
- Automating forensic workflows via scripting
Conclusion and Future Directions
Requirements
- Fundamental knowledge of the Linux command line
- Working familiarity with cybersecurity concepts
- Prior experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
