Hey there.
I'm Ashley Pearson.
In this course,
you will learn OS analysis using Sleuth Kit and Autopsy. If you've
ever been involved in a digital forensics investigation, you know the
importance of artifact analysis. The ability to quickly and
effectively analyze file system and memory artifacts in order to draw
conclusions and reconstruct attacker timelines is a vital skill set
for incident responders, threat hunters, and security analysts in general.
This course is designed to teach you to leverage the tool suite Sleuth
Kit and Autopsy to identify several MITRE ATT&CK techniques, including
process injection and artifact obfuscation.
As I mentioned earlier,
this course is designed as an introduction to an incredibly valuable tool
suite, Sleuth Kit and Autopsy. First, we'll cover some of the basic
functionality of both of these tools and how they work together.
Then, we'll walk through a quick demonstration on proper case
management within Autopsy. Specifically,
we'll be using Sleuth Kit and Autopsy to examine digital artifacts for
evidence of process injection and file and object obfuscation.
The skills learned in this course,
including the ability to parse file systems and extract these forensic
artifacts, are invaluable to incident responders, threat hunters,
security analysts, or others who perform digital forensics
investigations as part of their roles and responsibilities.