Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensics
- Overview of Kali Linux and its forensic capabilities
- Setting up a forensic-ready laptop
- Understanding chain of custody and legal implications
Disk and File System Forensics
- Techniques for disk acquisition and imaging
- Examining file systems using Autopsy and the Sleuth Kit
- Restoring deleted files and uncovering hidden data
Memory and Process Examination
- Methods for capturing volatile memory
- Investigating active processes and malware presence
- Applying Volatility for deep memory analysis
Network Forensics
- Recording live network traffic
- Inspecting packets with Wireshark and tcpdump
- Tracking intrusion paths and lateral movement
Log and Artifact Review
- Scanning system and application logs
- Detecting signs of compromise within artifacts
- Conducting timeline analysis of incident events
Incident Investigation Process
- Validating and acquiring evidence
- Following a structured investigation methodology
- Recording findings for stakeholder review
Advanced Utilities and Methods
- Forensic tools for mobile devices within Kali
- Analysis of steganography and encryption
- Automating forensic workflows through scripting
Recap and Future Pathways
Requirements
- Foundational knowledge of the Linux command line
- General awareness of cybersecurity principles
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
