Workshop: Investigating a Compromised Linux Web Server

Would you like to follow along with us?

Enroll Now

This Linux Forensics workshop is designed to help you learn how to investigate a compromised web server. By purchasing lab access, you will gain full access to the workshop content, including all instructional materials. Additionally, you will have 5 hours of virtual lab access to practice the techniques covered in the workshop and perform the analysis on the given compromised Linux web server. You have the flexibility to schedule and revisit the lab to solidify your knowledge and refine your skills, with 5 hours of practice at your own pace.

Syllabus

Here’s the syllabus for this workshop:

Intro

Case Overview
Deliverable(s)
Outcome(s)
Workshop Slides

Tasks

Task #0: Preparing your environment
Task #1: Verification and Adding the Evidence
Task #2: Mounting the File System
Task #3: System Navigation and Timezone
Task #4: Users, Groups, Permissions, etc
Task #5: Checking System Logs
Task #6: Working with The Sleuth Kit (TSK)
Task #7: Data Recovery / File Carving
Task #8: Finding How the Threat Actor Gained Access

Quiz

Wrap Up Quiz

If you'd like to practice in CYBER 5W
pre-configured Virtual Lab environment

Pay What You Can

What is next at Cyber 5W?

Add your email to the mailing list to get the latest updates.