In-person training

As a cybersecurity professional, you might come across bad guys and deal with their attacks. When suspicious activity is detected, the investigation starts. It may turn to the incident response, which raises questions such as: How did the attackers breach the systems and when? What kind of malicious activity have they performed and what data have been compromised? Or there already may be another not-so-good guy in your organization /insider threat/, for example, who has exfiltrated your valuable secrets, and this activity needs to be investigated with all the consequences.

This is the time for digital forensics to help us with the investigation. It is not only about analysis, but we should also keep in mind the correct evidence collection, and data acquisition too. During the training, we will cover the whole process of digital forensics with explanations, and practical hands-on exercises and examples.

In short, the agenda includes forensic introduction, local and remote data acquisition, evidence handling, and processing. After that, be ready for data analysis focusing on the most important Windows forensic artifacts.

During our training, we will see and try several “almost free” tools such as Kape, Velociraptor, Autopsy, ELK, Volatility, etc. After that, the final CTF-style challenge will be available to practice the covered content.

PREREQUISITES: