Python Digital Forensics

Course

Online

£ 30 + VAT

Description

  • Type

    Course

  • Methodology

    Online

  • Start date

    Different dates available

Use common Python libraries and tools to excel in network and host digital forensics.Python is uniquely positioned as a programming language to perform cyber investigations and perform forensics analysis. Unleash the power of Python by using popular libraries and Python tools to help you create efficient and thorough forensics investigations. This course will walk you through digital forensics on network traffic, host analysis, and memory analysis. The course starts with network forensics, an important aspect of any investigation. You will learn to read, sort, and sniff raw packets and also analyze network traffic. These techniques will help you drive your host analysis. You will learn about tools you'll need to perform a complete investigation with the utmost efficiency in both Windows and GNU/Linux environments with Python. Next, you will learn more advanced topics such as viewing data in PE and ELF binaries. It's vital to analyze volatile memory during an investigation as it provides details about what is actually running on a given system. So, you will learn the best tools to obtain and analyze volatile memory images. Finally, you will learn how to use Python in order to think like an attacker. You will complete enumeration, exploitation, and data exfiltration. By the end of the course, you will be able to make the most of Python processes and tackle varied, challenging, forensics-related problems. So, grab this course and think like an attacker! The code bundle for this course is available at About The Author
.
Daryl Bennett is a manager of a Cyberspace Threat Emulation team with the United States Air Force, where he leads military and civilian members in the employment and execution of offensive security on order to audit the security of network infrastructures. He is a key operator, focusing on risk analysis and the overall security posture of cyberspace systems. Additionally, he has 5+ years' experience working in the open-source community

Facilities

Location

Start date

Online

Start date

Different dates availableEnrolment now open

About this course

Think like an attacker and solve forensics issues with more efficiently
Learn network forensics to drive your host analysis
Investigate with the utmost efficiency in Windows and GNU/Linux environments
Learn advanced data-viewing topics in file analysis
Get the best tools to obtain and analyze volatile memory images
Use Python to complete enumeration, exploitation, and data exfiltration

Questions & Answers

Add your question

Our advisors and other users will be able to reply to you

Who would you like to address this question to?

Fill in your details to get a reply

We will only publish your name and question

Reviews

This centre's achievements

2021

All courses are up to date

The average rating is higher than 3.7

More than 50 reviews in the last 12 months

This centre has featured on Emagister for 4 years

Subjects

  • Object oriented training
  • Windows
  • Linux
  • Object-oriented training
  • Network
  • GNU
  • Design
  • Systems
  • Import
  • Network Training

Course programme

Python for Network Forensics 5 lectures 43:08 The Course Overview This video provides an overview of the entire course. Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Python for Network Forensics- Quiz Python for Network Forensics 5 lectures 43:08 The Course Overview This video provides an overview of the entire course. Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Python for Network Forensics- Quiz The Course Overview This video provides an overview of the entire course. The Course Overview This video provides an overview of the entire course. The Course Overview This video provides an overview of the entire course. The Course Overview This video provides an overview of the entire course. This video provides an overview of the entire course. This video provides an overview of the entire course. Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Learning Dshell In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
In this video, we will learn how to inspect network traffic at the packet level using Dshell.
  • Learn to set up a Python virtual environment
  • Learn to import packet capture
  • Use Dshell decoders to fuller analyze automate network traffic
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Working with Scapy In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
In this video, we will continue to deepen the level of knowledge of packet analysis with Scapy.
  • Familiarize ourselves with object-oriented notations
  • Practice using the Scapy interactive interpreter
  • Automate packet capture investigation through the Scapy interpreter
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Importing Scapy Modules In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
In this video, we will design a Python based Scapy tool to automate our network analysis.
  • Familiarize ourselves with common Python data structures
  • Learn to import 3rd party modules into our own application
  • Unleash the power of Python and Scapy by building our own application
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Introduction to Impacket In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
In this video, we will add breadth to our Python capability to extend functionality using Impacket.
  • Further expand our application to import Impacket
  • Decode raw packets using Impacket
  • Get a better understanding of encapsulation and how Impacket handles data
Python for Network Forensics- Quiz Python for Network Forensics- Quiz Python for Network Forensics- Quiz Python for Network Forensics- Quiz Windows 4 lectures 28:16 Enumerating Directories In this video, we will develop the technique to scan files in a directory in or to obtain items and properties. • Understand the basis of recursion and how it applies to directories • Learn about the OS module and how it applies to Python • Develop a Python based directory scanner Populating File Properties In this video, we will learn to populate properties of files such as permissions and timestamps. • Understand how to populate file properties • Populate and examine file permissions • Learn and query the different available timestamps of any given file in Windows Querying the Registry In this video, we will become familiar with the Windows registry and how the key:value data store maintains OS configuration data. • Learn how to interact with the registry using regedit • Use Python to interact with the registry by querying keys • Learn to query and enumerate subkeys and further traverse the registry Exploring Portable Executables In this video, we will learn about the Windows Portable Executable format. We will also learn how an attacker may be able to modify an executable to hide information. • Learn Python modules to open and read Portable Executables • Learn to use pedit to examine Windows binaries • Explore and modify the structure of Windows binaries with pedit Windows- Quiz Windows. 4 lectures 28:16 Enumerating Directories In this video, we will develop the technique to scan files in a directory in or to obtain items and properties. • Understand the basis of recursion and how it applies to directories • Learn about the OS module and how it applies to Python • Develop a Python based directory scanner Populating File Properties In this video, we will learn to populate properties of files such as permissions and timestamps. • Understand how to populate file properties • Populate and examine file permissions • Learn and query the different available timestamps of any given file in Windows Querying the Registry In this video, we will become familiar with the Windows registry and how the key:value data store maintains OS configuration data. • Learn how to interact with the registry using regedit • Use Python to interact with the registry by querying keys • Learn to query and enumerate subkeys and further traverse the registry Exploring Portable Executables In this video, we will learn about the Windows Portable Executable format. We will also learn how an attacker may be able to modify an executable to hide information. • Learn Python modules to open and read Portable Executables • Learn to use pedit to examine Windows binaries • Explore and modify the structure of Windows binaries with pedit Windows- Quiz Enumerating Directories In this video, we will develop the technique to scan files in a directory in or to obtain items and properties. • Understand the basis of recursion and how it applies to directories • Learn about the OS module and how it applies to Python • Develop a Python based directory scanner Enumerating Directories In this video, we will develop the technique to scan files in a directory in or to obtain items and properties r GNU/Linux Forensics - Enumerating Directories In this video, we will further the understanding of directory traversal in GNU/Linux systems. We will also understand and accomplish traversal recursively. • Learn the concepts of threading to implement recursive traversing • Begin using...

Additional information

Common forensics tasks and Python

Python Digital Forensics

£ 30 + VAT