Course description
We will focus on forensic evidence collection, log analysis, file integrity monitoring (FIM), network forensics and incident management using specialized tools.
Each participant will be provided with a PDF of the presentations.
Course structure
Day 1
- Introduction to the issue
- Introduction to tools for forensic analysis
Day 2
- Model examples for Windows and Linux OS
- Automated tools for forensics and log analysis (Wazuh)
Day 3
- Incident management process
- Documentation and reporting
- EXAM
