DO NOT DEAL WITH THIS MEMBER
Aug 10, 2016 07:02 AM
(This post was last modified: Aug 11, 2016 08:21 AM by spirited_wolf™.)
![[Image: lgi1l9W.png]](https://i.imgur.com/lgi1l9W.png)
Hello HackForum members,
Today i am here to share a course on Linux Forensics
About this tutorial
This course will familiarize students with all aspects of Linux forensics. By the end of this course students will be able to perform live analysis, capture volatile data, make images of media, analyze filesystems, analyze network traffic, analyze files, perform memory analysis, and analyze malware all on a Linux system with readily available free and open source tools. Students will also gain an in-depth understanding of how Linux works under the covers.
Some topics that this course contain
Quote:A non-exhaustive list of topics to be covered includes:
Live response
First talk to the humans
What do they think happened
Details on victim system(s)
Mount response kit with known good tools
cdrom preferred as it was not likely part of compromise
USB MS can be used if no CDROM
Using netcat to minimize contamination
Collecting volatile data
date and time
network interfaces
funny networks
promiscuous mode?
network connections
open ports
programs associated with ports
running processes
open files
routing tables
mounted filesystems
loaded kernel modules
Collecting data to determine if dead analysis is justified
kernel version
uptime
filesystem datetime stamps
hash values for system files
current user logins
login history
system logs
user accounts
user history files
hidden files and directories
sending off suspicious files for further study
Dumping RAM
Making the decision to dump RAM
Using fmem
Using LiME
Using /proc/kcore
Acquiring filesystem images
Using dd
Using dcfldd
Write blocking options
Forensic Linux distros
Udev rules based blocker
Analyzing filesystem images
Mounting images
Files with basic system info
Files with suspicious user info
Examining logs
Process-related files
Authentication-related files
Using standard Linux tools to find information
Strange files
Regular files in /dev
User history files
Hidden files
SUID/SGID files
Detecting backdated files
Recovering deleted files
Finding deleted files
Attempting recovery
Leveraging The Sleuth Kit (TSK) and Autopsy
mmls
fsstat
dstat
istat
fls & mactime
Timeline Analysis
When was system installed, upgraded, booted, etc.
Newly created files (malware)
Changed files (trojans)
Files in the wrong place (exfiltration)
Digging deeper into Linux filesystems
Disk editors
Active@ Disk Editor
Autopsy
ExtX
Basics
Superblocks
Directory entries
Inodes
Data blocks
Compatible, incompatible, and read-only compatible features
Experimental features may be installed
Boot code
![[Image: g1IDGdS.png]](https://i.imgur.com/g1IDGdS.png)
![[Image: Khkmae1.png]](https://i.imgur.com/Khkmae1.png)
==> Sharing My Ebook collection for hackers/Penetration testers<==
==>Giving Reverse Engineering and Exploit Development Course<= Worth $99.99 USD for free<==
==> Giving one way to get Unlimited Free Hosting<==
==>Sharing Pentester Academy Pentesting iOS Applications Course<==
==>Giving PayPal Essential Training Course download link<==
==> A great collection on Cross Site Scripting[XSS] Tutorials<==
==>[A huge collection]Ethical Hacking and Penetration Testing (Kali Linux) tutorials<==
==>[PentesterAcademy] Linux Forensics course Downloading link<==
==> [Course]USB Forensics and Pentesting Downloading link<==
Thanks 🤝
Hey mate, I wouldn't mind getting this download!
Thanks pal!
DO NOT DEAL WITH THIS MEMBER
(Aug 10, 2016 07:23 AM)Online Sir Wrote: Hey mate, I wouldn't mind getting this download!
Thanks pal!
I have send you the download link brother 🤝
I wouldn't mind of you send me the link to download, Thanks
DO NOT DEAL WITH THIS MEMBER
(Aug 11, 2016 09:46 AM)Numinous Wrote: I wouldn't mind of you send me the link to download, Thanks Done ✌
Pmed you 🤝
Thanks 🎉
Can I please get the download link?
Thanks :)
DO NOT DEAL WITH THIS MEMBER
Aug 12, 2016 02:28 AM
(This post was last modified: Aug 12, 2016 02:28 AM by spirited_wolf™.)
(Aug 12, 2016 02:22 AM)wise rushaan Wrote: Can I please get the download link?
Thanks :) this is only for upgraded member bro 😊 sorry
i apologize 🙂
Can I get this please?, Thank you so much bro.
|