Linux Forensics – Hal Pomeranz – 2023 v3.0.2 (Lab VM, Exercises, PDF, & Videos)

Linux Forensics   Hal Pomeranz   2023 v3.0.2 (Lab VM, Exercises, PDF, & Videos)
English | Tutorial | Size: 84.16 GB

This 32-hour, hands-on course is a quick start into the world of Linux forensics. Learn how to use memory forensics to rapidly triage systems and spot attacker malware and rootkits. Learn where the most critical on-disk artifacts live and how they can help further an investigation. Rapidly process Linux logs and build a clearer picture of what happened on the system.

 

It covers:
— Live system capture and triage with UAC
— Memory capture and analysis
— Mounting and triage of Linux disk images
— File system timeline analysis
— Log file analysis
— Analysis of user artifacts
— EXT and XFS file system forensics

The course is divided into modules and there is a hands-on lab exercise after each module. Labs are completed inside of a Linux virtual machine image, which is provided with the course materials.

Key Takeaways

Acquiring and analyzing Linux memory
Accessing complex Linux disk geometries
Rapid triage for key Linux artifacts
Linux log analysis

Who Should Take This Course

Experienced forensic professionals wanting to expand their Linux knowledge
SOC analysts needing a stronger grounding in Linux
Administrators/developers defending Linux infrastructures

Audience Skill Level

This course is an introduction to Linux forensics, but not an introduction to forensics. The course assumes at least some knowledge of digital forensic methods, such as evidence acquisition. This course is heavily command-line driven, so basic familiarity with the Linux command-line is helpful.