We can host this training at your preferred location. Contact us!

This specialist-level course is for experienced forensic investigators who want to acquire the knowledge and skills to navigate, identify, capture and examine data from Linux-based systems.

COURSE OVERVIEW

Linux is an increasingly popular operating system. This two-day course will provide you with a practical understanding from a forensic perspective of how to deal with a Linux system, and requires no previous Linux knowledge. You will develop a core understanding of the file system data structures and key files so that they can be confident in capturing potential digital evidence. Throughout the course you will apply this knowledge in hands-on exercises to demonstrate and reinforce understanding, using both a Linux environment and Windows based forensic software.

Completion of the 7Safe CFIP course is highly recommended. Alternatively you will need an understanding of digital forensic principles and practices. No Linux experience is necessary.

Who Should Attend?

Forensic practitioners
Systems administrators
Cyber investigators who want to extend their experience from Window-based systems to the Linux environment.

THE SKILLS YOU WILL LEARN

Upon completion of the course you will have used a Linux System to:

Become familiar with both Linux GUI and command line environments.
Demonstrate how Linux can be used for forensic imaging.
Capture RAM and basic volatile data from a live Linux system. (Note: This is not network identification or network traffic capture)

and Windows based forensic software and an image of a Linux system to:

Examine ext3 and ext4 file system structures
Identify core system information
Explore system log files for artefacts including; boots, logins and device connection
Examine user artefacts including; recent activity, thumbnails and printing.

KEY BENEFITS

On this course, you will:

Understand the data structures associated with the ‘ext’ file systems
Learn effective techniques to extract data from a Linux environment
Develop confidence when identifying and capturing Linux system artefacts
Improve your ability to respond effectively to a wider range of forensic incidents

SYLLABUS

What is Linux? Overview of flavours (distributions)
Key differences between Linux and Windows forensics
Linux concepts, privileges and permissions
Linux disk layouts and key directories
Navigating a Linux system and commonly used command line utilities
Understanding devices and disk mounting
Data collection from and using Linux systems
Capturing volatile data including RAM
Built-in forensic applications i.e dd for imaging and disk wiping
Overview of file system compatibility, ext2, 3 and 4
Ext file systems How disks are mapped and data stored
Problems associated with recovering data from ext file systems
System information from a forensic image
Log files, where to find them and nature of content
Devices connected and disks mounted
User accounts – identification, passwords and permissions
Introduction to memory analysis
User system navigation, execution and printing
Linux in Business - FTP servers, databases, mail, web-servers
Capturing and process for log file examination using Linux

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Certified Linux Forensic Practitioner (CLFP) Training Course in Norway

The Nordic country Norway, is in Northern Europe. Known for its stunning natural beauty, including fjords, mountains, and forests, Norway is also famous for its high standard of living and strong social welfare system. Norway's capital and largest city is Oslo. Tromsø, Bergen, Trondheim and Stavanger are the other tourist attracting cities of Norway.

Norway is a constitutional monarchy with King Harald V as the head of state. The country has a population of 5,425,270 as of January 2022. Norway is a relatively small country and has a relatively low population density, with much of its land area covered by forests, mountains, and fjords. Despite its small size, Norway is known for its rich cultural heritage, strong economy, and stunning natural beauty, which attracts millions of visitors every year. This Nordic country is also known for its winter sports, such as skiing and snowboarding, and is a popular destination for outdoor enthusiasts.

Norway has a long history of invention and is home to numerous more top-tier tech firms and research facilities, such as; Kongsberg Gruppen, Telenor, Atea, Evry and Gjensidige Forsikring.

Due to the country's high latitude, there are large seasonal variations in daylight. From late May to late July, the sun never completely descends beneath the horizon. Which attracts many tourists around the world to see the "Land of the Midnight Sun". Tourists mainly visit Sognefjord, Norway's Largest Fjord, Pulpit Rock, one of the most photographed sites in Norway and of course the capital; Oslo.

Oslo is considered the business center of Norway. It is the country's largest city and the capital of Norway. The city is home to many of Norway's largest and most important companies, as well as several international organizations and research institutions. Additionally, the city is a popular tourist destination, known for its scenic location on the Oslo Fjord, its many museums and cultural attractions, and its vibrant nightlife and dining scene. Some of the most popular museums in Oslo are The Norwegian Museum of Cultural History, The Nobel Peace Center, The National Museum of Art, Architecture, and Design, The Munch Museum and The Vigeland Museum.

Certified Linux Forensic Practitioner (CLFP) Training in Norway

Upcoming Trainings

Certified Linux Forensic Practitioner (CLFP) Training in Norway

Prerequisites

What You Will Learn

Outline

Upcoming Trainings