Before the course |
|
(W00) Course Instructions |
|
00:00:00 |
Module 1 |
|
(W42M01) An introduction to Ubuntu |
|
00:00:00 |
|
(W42M02) Installation |
|
00:00:00 |
|
(W42M03) Basic Linux Commands |
|
00:00:00 |
|
(W42M04) Setting up an Ubuntu forensic workstation |
FREE |
00:00:00 |
|
(W42M05) Useful commands in forensic activities |
FREE |
00:00:00 |
|
(W42M06) Working on Ubuntu forensic images |
|
00:00:00 |
|
(W42M07) The SleuthKit |
|
00:00:00 |
|
(W42M08) Metadata analysis with Exiftool |
|
00:00:00 |
|
(W42M09) Exiftool - video |
|
00:00:00 |
|
(W42A01) Working with the image of a seized device - Lab |
30, 00:00 |
|
(W42A02) Reconstruct a route using the GPS coordinates of the metadata - Lab |
30, 00:00 |
Module 2 |
|
(W42M00) LiME |
|
00:00:00 |
|
(W42M00) Extracting files |
|
00:00:00 |
|
(W42M12) Collecting volatile data |
|
00:00:00 |
|
(W42M13) User information |
|
00:00:00 |
|
(W42M14) Workstation information |
|
00:00:00 |
|
(W42M15) Network information |
|
00:00:00 |
|
(W42M16) Boot sequence analysis |
|
00:00:00 |
|
(W42M17) Scheduled tasks |
|
00:00:00 |
|
(W42M18) Applications |
|
00:00:00 |
|
(W42M19) Recent files |
|
00:00:00 |
|
(W42M20) Nautilus and GNOME |
|
00:00:00 |
|
(W42M21) Thumbnails |
|
00:00:00 |
|
(W42A03) Collecting workstation information - Lab |
30, 00:00 |
|
(W42A04) Collecting user information - Lab |
30, 00:00 |
Module 3 |
|
(W42M24) Firefox |
|
00:00:00 |
|
(W42M25) The SQL Query Language |
|
00:00:00 |
|
(W42M00) SQLite |
|
00:00:00 |
|
(W42M26) Firefox artifacts |
|
00:00:00 |
|
(W42M27) Thunderbird |
|
00:00:00 |
|
(W42M28) Thunderbird artifacts |
|
00:00:00 |
|
(W42M29) Collecting Account Passwords |
|
00:00:00 |
|
(W42M00) Mail Parser |
|
00:00:00 |
|
(W42A05) Firefox forensics - Lab |
30, 00:00 |
|
(W42A06) Thunderbird Forensics |
30, 00:00 |
Module 4 |
|
(W42M32) An introduction to eCryptfs |
|
00:00:00 |
|
(W42M33) eCryptfs on Ubuntu |
|
00:00:00 |
|
(W42M34) How to encrypt folders and files |
|
00:00:00 |
|
(W42M35) How to mount an encrypted folder |
|
00:00:00 |
|
(W42M00) Mount a private folder |
|
00:00:00 |
|
(W42M36) John the Ripper |
|
00:00:00 |
|
(W42M37) Creating a wordlist with Bulk Extractor |
|
00:00:00 |
|
(W42M00) A dictionary attack |
|
00:00:00 |
|
(W42A07) Mounting an encrypted folder - Lab |
30, 00:00 |
|
(W42A08) Dictionary Attack with John the Ripper - Lab |
30, 00:00 |
Final Exam |
|
(W42Q01) Final Exam |
|
00:15:00 |
|
(W42M00) Course publication schedule |
|
00:00:00 |