Digital Forensics Analyst — career path

Learn

• CourseDigital Forensics for Pentesters - Hands-on Learning↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  18 sections · 67 lectures

  1. Training Overview 2
  2. Course Overview 1
  3. Building Your Forensics Lab Environment Using VirtualBox 6
  4. New Course Content 6
  5. Troubleshooting VirtualBox 2
  6. Introduction to Autopsy 4
  7. Kali forensic Mode 4
  8. CSI Linux Investigator 3
  9. Digital Forensics Case Management 1
  10. Open-source intelligence (OSINT) 3
  11. Using Shodan to Search for Vulnerable devices 3
  12. Computer Forensics 9
  13. Reverse Engineering and Malware Analysis 5
  14. Malware Hunting with Sysinternal Tools 3
  15. Stenography 2
  16. Network forensics Using Wireshark 7
  17. Practice What You learned 5
  18. Audio Version of Training 1

Practise

• LabsForensic Investigations and Evidence Handling — 13 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze and Update a Company BCP/BIA/DRP/CIRP⏱Duration: 2 h also on Step 5 (CySA+)
  • Analyze Packed Executable to Identify Attack Vector and Payload⏱Duration: 1 h
  • BCP DRP and Test Planning⏱Duration: 2 h also on Step 1 (Security+)
  • Creating a Case in Autopsy⏱Duration: 2 h
  • Creating a Case in OSF⏱Duration: 1 h
  • Creation of BCP and DRP⏱Duration: 3 h also on Step 1 (Security+)
  • FTK Analysis & Reporting⏱Duration: 1 h
  • FTK Enterprise Fundamentals and Mobile Investigation⏱Duration: 2 h
  • Metadata Extraction Lab⏱Duration: 1 h
  • Open Source Password Cracking⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Password Cracking with PRTK⏱Duration: 2 h
  • Registry Analysis⏱Duration: 2 h also on Step 6
  • Virtualization⏱Duration: 1 h
• LabsDigital Media Forensics — 15 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Malicious Network Traffic⏱Duration: 2 h also on Step 6
  • Compromise Assessment with Crowd Response⏱Duration: 1 h
  • Conduct Log Analysis and Cross Examination for False Positives⏱Duration: 1 h also on Step 5 (CySA+)
  • Creating a Forensic Image⏱Duration: 1 h also on Step 6
  • Data Recovery with Autopsy⏱Duration: 1 h also on Step 5 (CySA+) and Step 6
  • Detect the Introduction of a Malicious Application⏱Duration: 1 h
  • Identify Access to a LINUX Firewall Through SYSLOG Service⏱Duration: 1 h also on Step 6
  • Identify and Remove Trojan Using Various Tools⏱Duration: 1 h
  • Identify Suspicious Information in VM Snapshots⏱Duration: 1 h
  • Identify Whether High-Risk Systems Were Affected⏱Duration: 1 h also on Step 5 (CySA+)
  • Live Imaging with FTK Imager and Data Recovery with Autopsy⏱Duration: 2 h
  • Manually Analyze Malicious PDF Documents⏱Duration: 1 h also on Step 6
  • Manually Analyze Malicious PDF Documents 2⏱Duration: 1 h also on Step 6
  • Memory Extraction and Analysis⏱Duration: 1 h also on Step 6
  • Participate in Attack Analysis Using Trusted Tool Set⏱Duration: 1 h also on Step 6

Learn

• CourseMaster Wireshark 3 in 5 Days↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  6 sections · 34 lectures

  1. Training Overview 2
  2. Day One 3
  3. Day Two 8
  4. Day Three 7
  5. Day Four 7
  6. Day Five 7

Practise

• LabsNetwork Forensics — 15 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Browser-based Heap Spray Attack⏱Duration: 1 h
  • Automated in-Depth Packet Decoding⏱Duration: 2 h
  • Clonezilla Network⏱Duration: 1 h
  • Identifying Intrusion and Mitigating Attacks with RHEL Server⏱Duration: 1 h
  • Identifying Malicious Callbacks⏱Duration: 1 h
  • Identifying Malicious Network Connections⏱Duration: 1 h also on Step 5 (CySA+)
  • Incident Detection and Identification⏱Duration: 3 h
  • Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)⏱Duration: 1 h
  • Parse Files Out of Network Traffic⏱Duration: 1 h also on Step 5 (CySA+) and Step 6
  • Searching for Indicators of Compromise⏱Duration: 1 h also on Step 5 (CySA+)
  • Setting up Filters and Queries in Kibana⏱Duration: 1 h also on Step 5 (CySA+) and Step 6
  • Use pfTop to Analyze Network Traffic⏱Duration: 1 h also on Step 6
  • Verify Attributes of Identified SilentBanker Intrusion⏱Duration: 1 h
  • Verify Attributes of Intrusion Through Additional Analysis⏱Duration: 1 h
  • Windows Event Log Manipulation via Windows Event Viewer⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)

Learn

• CourseReverse Engineering: Ghidra For Beginners↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  16 sections · 25 lectures

  1. Section 1. Introduction 1
  2. Installing Kali Linux and Ghidra 3
  3. Creating Projects and Importing Files 1
  4. Decompiling Code and Renaming Symbols 1
  5. Saving and Restoring Virtual Machine Snapshots 1
  6. Configuring Ghidra to Highlight All Similar Variables Based On Selection 2
  7. ASCII Code and Hex Numbers 1
  8. ASCII Code and Array Indexes 1
  9. Stepping into functions and adding comments 2
  10. Ghidra on Windows 3
  11. Reversing Workflows 1
  12. Reversing GUI CrackMe's 1
  13. Converting data types, Using Debuggers, Creating Functions and Function Graph 3
  14. How to run windows exe programs on Linux 1
  15. Reversing using combination of listing assembly and decompiled view 2
  16. Resources For Further Study 1
• CourseReverse Engineering & Malware Analysis - Intermediate Level↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  14 sections · 39 lectures

  1. Introduction 1
  2. Types of Malware and Malware Analysis Terminologies 2
  3. Lab: Analysis of .NET Trojan Spyware (Info-Stealers) 4
  4. Assembly Language Refresher and Malicious APIs 2
  5. API Hooking, Process Hijacking and Dumping Memory 3
  6. Lab: Unpacking Emotet Trojan 3
  7. Lab: Unpacking Hancitor Trojan 3
  8. Lab: Unpacking Vmprotect Trojan 3
  9. Lab: Unpacking Trickbot Trojan 3
  10. Lab: Unpacking Dridex Trojan 4
  11. Lab: Unpacking Ramnit Trojan 3
  12. Lab: Unpacking Remcos Trojan with xdbg and dnSpy 4
  13. Lab: Unpacking Zloader Trojan 3
  14. Resources For Further Study 1
• CourseMalware Analysis Of Malicious Documents↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  12 sections · 35 lectures

  1. Section 1 : Introduction 2
  2. Section 2 : Installing the Tools 6
  3. Section 3 : Malware Analysis Process 1
  4. Section 4 : Intro to Static Analysis 2
  5. Section 5 :Analyzing PDF Documents 8
  6. Section 6 : Performing Javascript Analysis 2
  7. Section 7 : Lab: Pdf Analysis 2
  8. Section 8 : Analyzing Office Documents 2
  9. Section 9 : Performing VBA Script Analysis 2
  10. Section 10 : Using Debuggers in Document Analysis 3
  11. Section 11 : Lab: Analyzing An Office Document 3
  12. Section 12 : Resources For Further Study 2

Practise

• LabsMalware Analysis & Reverse Engineering — 18 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Advanced Techniques for Malware Recovery⏱Duration: 1 h also on Step 5 (CySA+)
  • Analysis and Recommendation Report⏱Duration: 1 h also on Step 5 (CySA+)
  • Analyze and Classify Malware⏱Duration: 1 h also on Step 5 (CySA+)
  • Analyze DoomJuice Infection to Identify Attack Vector and Payload⏱Duration: 1 h
  • Analyze Malicious Activity in Memory Using Volatility⏱Duration: 1 h
  • Conduct Root Cause Analysis for System Crashes⏱Duration: 1 h also on Step 5 (CySA+) and Step 6
  • Detect Embedded Shellcode in a Microsoft Office Document⏱Duration: 1 h
  • Dynamic Malware Analysis⏱Duration: 1 h also on Step 5 (CySA+) and Step 6
  • Fundamentals of Malware Analysis
  • Linux Analysis⏱Duration: 1 h
  • Log Analysis⏱Duration: 1 h also on Step 5 (CySA+)
  • MAC Analysis⏱Duration: 1 h
  • Practical Malware Analysis Labs
  • Recover from Incident⏱Duration: 2 h also on Step 5 (CySA+) and Step 6
  • Remove Trojan⏱Duration: 1 h
  • Reverse Engineering Malware
  • RootKit⏱Duration: 2 h
  • Validate Indications of Compromise: Analysis of PE File⏱Duration: 1 h also on Step 5 (CySA+) and Step 6

Learn

• CourseCovered in Digital Forensics for Pentesters - Hands-on Learning↗ (opens in a new tab)opens on courses.stationx.net — its case-management and practice sections, applied case after case 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  18 sections · 67 lectures

  1. Training Overview 2
  2. Course Overview 1
  3. Building Your Forensics Lab Environment Using VirtualBox 6
  4. New Course Content 6
  5. Troubleshooting VirtualBox 2
  6. Introduction to Autopsy 4
  7. Kali forensic Mode 4
  8. CSI Linux Investigator 3
  9. Digital Forensics Case Management 1
  10. Open-source intelligence (OSINT) 3
  11. Using Shodan to Search for Vulnerable devices 3
  12. Computer Forensics 9
  13. Reverse Engineering and Malware Analysis 5
  14. Malware Hunting with Sysinternal Tools 3
  15. Stenography 2
  16. Network forensics Using Wireshark 7
  17. Practice What You learned 5
  18. Audio Version of Training 1

Practise

• LabsCyber Defense Forensics Analyst Training Series — 70 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Malicious Network Traffic⏱Duration: 2 h also on Step 2
  • Auditing Service Accounts⏱Duration: 1 h
  • Auditing Service Accounts and Setting Up Automated Log Collection⏱Duration: 2 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Baseline Systems in Accordance with Policy Documentation⏱Duration: 1 h also on Step 1 (Security+)
  • Conduct Root Cause Analysis for System Crashes⏱Duration: 1 h also on Step 4 and Step 5 (CySA+)
  • Conduct Supplemental Monitoring⏱Duration: 1 h also on Step 5 (CySA+)
  • Control Assessment and Evaluation⏱Duration: 1 h
  • Creating a Baseline Using Autopsy⏱Duration: 1 h also on Step 1 (Security+)
  • Creating a Case in FTK⏱Duration: 2 h
  • Creating a Forensic Image⏱Duration: 1 h also on Step 2
  • Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server⏱Duration: 1 h also on Step 1 (Security+)
  • Cryptography: Steganography⏱Duration: 2 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Cryptography: Using GPG for Encryption and Key Management⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Data Backup to Prep for Recovery⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Data Recovery with Autopsy⏱Duration: 1 h also on Step 2 and Step 5 (CySA+)
  • Denial of Service PCAP Analysis⏱Duration: 1 h
  • Dynamic Malware Analysis⏱Duration: 1 h also on Step 4 and Step 5 (CySA+)
  • Event Log Collection with Splunk⏱Duration: 1 h
  • Hash Verification⏱Duration: 1 h also on Step 5 (CySA+)
  • Host Identification Scanning via Windows⏱Duration: 1 h
  • Host Identification Scanning with Linux⏱Duration: 1 h
  • Identify Access to a LINUX Firewall Through SYSLOG Service⏱Duration: 1 h also on Step 2
  • Implement Single System Changes in Firewall⏱Duration: 1 h
  • Import Nexpose Vulnerability Data into QRadar⏱Duration: 1 h 30 min
  • Intro to Linux - Routing and SSH Tunnels⏱Duration: 2 h
  • Introduction to Squert⏱Duration: 1 h also on Step 5 (CySA+)
  • Lab Environment Orientation - *** (Start Here!) ***⏱Duration: 1 h
  • Live Imaging with FTK Imager Lite⏱Duration: 1 h
  • LNX101 - OpenSSH Installation, Configuration, and Hardening⏱Duration: 1 h
  • LNX101 - Setting Up a Firewall With UFW and Firewalld⏱Duration: 1 h
  • LNX101 - Telnet vs. SSH⏱Duration: 1 h
  • Log Event Reports⏱Duration: 1 h also on Step 5 (CySA+)
  • Manual Vulnerability Assessment⏱Duration: 1 h also on Step 5 (CySA+)
  • Manually Analyze Malicious PDF Documents⏱Duration: 1 h also on Step 2
  • Manually Analyze Malicious PDF Documents 2⏱Duration: 1 h also on Step 2
  • Manually Creating a Baseline with MD5Deep⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Memory Extraction and Analysis⏱Duration: 1 h also on Step 2
  • Nessus Scanning and Reporting⏱Duration: 1 h
  • Nexpose: Blue Team Remediation⏱Duration: 3 h
  • Overview of Kibana⏱Duration: 1 h also on Step 5 (CySA+)
  • PAM Lab⏱Duration: 1 h
  • Parse Files Out of Network Traffic⏱Duration: 1 h also on Step 3 and Step 5 (CySA+)
  • Participate in Attack Analysis Using Trusted Tool Set⏱Duration: 1 h also on Step 2
  • Patching With WSUS⏱Duration: 2 h
  • Pentesting & Network Exploitation - Linux Target Analysis Labs⏱Duration: 2 h
  • Preliminary Scanning⏱Duration: 1 h also on Step 5 (CySA+)
  • Protect Against Beaconing⏱Duration: 1 h also on Step 5 (CySA+)
  • Recover from Incident⏱Duration: 2 h also on Step 4 and Step 5 (CySA+)
  • Recovery From Inadequate Patching⏱Duration: 2 h
  • Registry Analysis⏱Duration: 2 h also on Step 2
  • Rogue Device Identification and Blocking⏱Duration: 1 h
  • Scanning From Windows⏱Duration: 1 h also on Step 1 (Security+)
  • Scanning with Nmap⏱Duration: 1 h
  • Securing Linux - Firewalls⏱Duration: 1 h
  • Securing Linux for System Administrators⏱Duration: 1 h
  • Setting up Filters and Queries in Kibana⏱Duration: 1 h also on Step 3 and Step 5 (CySA+)
  • Snap Exploit⏱Duration: 1 h
  • Snort Signatures, IDS Tuning, and Blocking⏱Duration: 1 h
  • Specialized Linux Port Scans⏱Duration: 1 h
  • Threat Designation⏱Duration: 1 h also on Step 5 (CySA+)
  • Tweaking Firewall Rules for Detection⏱Duration: 1 h also on Step 1 (Security+)
  • Use pfTop to Analyze Network Traffic⏱Duration: 1 h also on Step 3
  • Using Snort and Wireshark to Analyze Traffic⏱Duration: 1 h also on Step 1 (Security+) and Step 5 (CySA+)
  • Validate Indications of Compromise: Analysis of PE File⏱Duration: 1 h also on Step 4 and Step 5 (CySA+)
  • WebApp Attack PCAP Analysis⏱Duration: 1 h also on Step 5 (CySA+)
  • Whitelist IP Address from IDS Alerts⏱Duration: 1 h
  • Windows Event Log Manipulation via Windows Event Viewer⏱Duration: 1 h
  • Windows System Hardening with Group Policy & Active Directory⏱Duration: 2 h also on Step 5 (CySA+)
  • Windows System Hardening with PowerShell⏱Duration: 2 h also on Step 5 (CySA+)
  • Wireshark⏱Duration: 1 h also on Step 1 (Security+)