hal_pomeranz, 1 year ago

I'm happy to announce that a new version of my Linux Forensics class is available from https://archive.org/details/HalLinuxForensics

Some of the major changes in this version:

-- Memory forensics material updated with Volatility 3
-- All new memory forensics labs, including one on LD_PRELOAD style rootkits
-- UAC updates
-- Brand new Lab VM based on Debian 11

As always, the course material and labs are freely available under Creative Commons license. Use the torrent link to download everything because we're talking >70GB of data with the new VM.

I hope to be announcing some public teaching dates in the near future. Or reach out to me and we can discuss private training for your team.

#Linux #DFIR #Training