Get in Touch
 Duration 21 hours

Course Outline

Introduction to Kali Linux for Forensics

  • Overview of Kali Linux and its forensic capabilities
  • Preparation of a forensic-ready laptop
  • Chain of custody and legal implications

Disk and File System Forensics

  • Acquisition and imaging of disks
  • File system analysis using Autopsy and Sleuth Kit
  • Recovery of deleted files and concealed data

Memory and Process Analysis

  • Capture of volatile memory
  • Investigation of processes and malware
  • Application of Volatility for memory analysis

Network Forensics

  • Acquisition of live network traffic
  • Packet analysis with Wireshark and tcpdump
  • Tracking intrusion activities and lateral movement

Log and Artifact Analysis

  • Examination of system and application logs
  • Detection of compromise artifacts
  • Timeline analysis of incidents

Incident Investigation Workflow

  • Evidence acquisition and verification
  • Structured investigation methodology
  • Documentation of findings for stakeholders

Advanced Tools and Techniques

  • Mobile device forensic tools within Kali
  • Analysis of steganography and encryption
  • Automation of forensic tasks through scripting

Summary and Next Steps

Requirements

  • Foundational knowledge of the Linux command line
  • Acquaintance with cybersecurity concepts
  • Background experience in incident response or IT security operations

Target Audience

  • Digital forensic investigators
  • Members of incident response teams
  • IT security professionals

Number of participants


Price per participant

Upcoming Courses

Related Categories