Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux in Forensic Contexts
- Overview of Kali Linux and its forensic functionalities
- Configuration of a forensic-ready laptop
- Chain of custody protocols and legal implications
Disk and File System Forensics
- Processes for disk acquisition and imaging
- File system analysis using Autopsy and Sleuth Kit
- Recovery of deleted files and concealed data
Memory and Process Examination
- Capture of volatile memory states
- Investigation of active processes and malware behavior
- Application of Volatility for in-depth memory analysis
Network Forensics
- Live capture of network traffic
- Packet inspection using Wireshark and tcpdump
- Tracking intrusion patterns and lateral movement
Log and Artifact Scrutiny
- Examination of system and application logs
- Detection of compromise indicators
- Constructing timelines of incident events
Incident Investigation Process
- Evidence acquisition and verification
- Structured investigation methodology
- Documentation of findings for stakeholder review
Advanced Tools and Methodologies
- Forensic tools for mobile devices within Kali Linux
- Analysis of steganography and encryption
- Scripting for automation of forensic tasks
Summary and Future Directions
Requirements
- Fundamental knowledge of the Linux command line
- Understanding of core cybersecurity principles
- Practical experience in incident response or IT security operations
Target Audience
- Digital forensic investigators
- Members of incident response teams
- IT security specialists
