Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensic Contexts
- Overview of Kali Linux and its forensic capabilities
- Setting up a forensic-ready laptop
- Understanding chain of custody and legal implications
Disk and File System Forensics
- Acquisition and imaging of disks
- File system examination using Autopsy and Sleuth Kit
- Recovery of deleted files and concealed data
Memory and Process Analysis
- Capture of volatile memory
- Investigation of active processes and malware
- Application of Volatility for memory analysis
Network Forensics
- Capture of live network traffic
- Packet inspection using Wireshark and tcpdump
- Tracking intrusion activities and lateral movement
Log and Artifact Analysis
- Examination of system and application logs
- Detection of compromise artifacts
- Conducting timeline analysis of incidents
Incident Investigation Workflow
- Evidence acquisition and verification
- Methodical step-by-step investigation approach
- Documentation of findings for stakeholders
Advanced Tools and Techniques
- Mobile device forensic utilities within Kali
- Analysis of steganography and encryption
- Automating forensic tasks through scripting
Conclusion and Future Directions
Requirements
- Fundamental knowledge of the Linux command line
- Working familiarity with core cybersecurity concepts
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security professionals
