Pricing Options

Kindly choose the enrollment pricing option that suits you best. If you're enrolling as a group or need a custom plan, please contact us. We're here to help!

  • Evidence Acquisition under Linux

    Course Material + 40 hours of virtual lab access

    $100.00

    Buy Now

  • Evidence Acquisition under Linux

    Course Material - No virtual lab access

    $50.00

    Buy Now

Course Curriculum

  • 01

    Introduction

    • Introduction

    • DD Command
  • 02

    Evidence Acquisition

    • Evidence Acquisition

    • Imaging Disks Using DD

    • Disk Wiping And Initialization
  • 03

    E01 Images

    • E01 Images

    • Tool#1 ewfverify

    • Tool #2 Ewfacquire

    • Tool #3 Ewfinfo
  • 04

    Create a Bootable USB Drive Using DDRESCUE Tool

    • Create a Bootable USB Drive Using DDRESCUE Tool
  • 05

    Using NETCAT

    • Using NETCAT to Copy Forensic Images

    • Using Netcat In One Machine

    • Using Netcat Between Two Machines - Linux

    • Using Netcat Between Two Machines - Windows

    • Disk Unmounting
  • 06

    Exercises

    • Exercise 1

    • Exercise 1.1 - Solution

    • Exercise 1.2 - Solution

    • Exercise 1.3 - Solution

    • Exercise 1.4 - Solution

Learning Outcomes

This course demonstrates the skills that you need to master the digital evidence acquisition skill

  • Learn the different types of disks in Linux system.

  • Learn how to wipe and initialize a disk to use it in the investigation.

  • Learn how to deal with an E01 image in Linux.

  • Create a bootable USB for live acquisition.

  • Learn remote acquisition

Technical Requirements

For the hands-on labs in this course

  • Tsurugi operating system (recommended)

  • Internet Connection

  • Virtualization Software

What is next at Cyber 5W?

Add your email to the mailing list to get the latest updates.