Get in Touch
 Duration 21 hours

Course Outline

Kali Linux in Forensics: An Introduction

  • Overview of Kali Linux and its forensic potential
  • Preparing a laptop for forensic operations
  • Understanding chain of custody and legal implications

Disk and File System Examination

  • Techniques for disk acquisition and imaging
  • File system analysis using Autopsy and the Sleuth Kit
  • Recovery of deleted files and concealed data

Memory and Process Inspection

  • Methods for capturing volatile memory
  • Investigation of active processes and malware presence
  • Application of Volatility for in-depth memory analysis

Network Forensics

  • Capturing live network data streams
  • Packet inspection using Wireshark and tcpdump
  • Tracking intrusion patterns and lateral movement

Log and Artifact Review

  • Analyzing system and application log files
  • Detecting indicators of compromise
  • Conducting timeline analysis of security incidents

Incident Investigation Methodologies

  • Processes for evidence collection and verification
  • Structured approach to investigation steps
  • Documenting results for key stakeholders

Advanced Tools and Methodologies

  • Forensic utilities for mobile devices in Kali
  • Analysis of steganography and encryption techniques
  • Automating routine forensic tasks through scripting

Wrap-up and Future Directions

Requirements

  • Fundamental knowledge of the Linux command line
  • Proficiency with core cybersecurity principles
  • Practical experience in incident response or IT security operations

Target Audience

  • Digital forensic examiners
  • Members of incident response teams
  • IT security specialists

Number of participants


Price per participant

Upcoming Courses

Related Categories