|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/surviving-digital-forensics-ram-extraction-fundamentals/
课程评论：没有评论
课程名称：生存数字取证：RAM提取基础 课程概述：RAM提取是计算机证据收集过程中一项前沿考官技能，需求日益增加。系统的实时内存中包含大量有价值的取证数据。经过内存取证培训的计算机分析师可以挖掘隐藏的恶意软件进程、用户活动、以及可能对访问受保护数据至关重要的加密密钥或密码哈希。该课程为您提供基础知识，帮助您更好地判断是否应捕获实时内存。同时，该课程还为您提供使用多种免费RAM捕获工具的实际操作经验，并探讨使用Inception的高级主题。 课程内容包括： - 了解RAM提取的重要性以及数据如何影响您的案件。 - 通过实际练习，掌握不同的RAM提取工具。 - 学习如何评估和基准您的RAM捕获工具。 - 学习如何使用PALADIN启动INCEPTION，以获取密码保护系统的访问权限并提取RAM。 整个学习过程大约需要一小时，所使用的工具均为免费提供。
Conducting a RAM extraction as part of the computer evidence collection process is a front line examiner skill which becoming more and more in demand. A system's live memory contains an assortment of valuable forensic data. A computer analyst trained in memory forensics can dig out evidence of hidden malware processes, user activity and encryption keys or password hashes that may be critical to accesses protected data.This class provides you with the foundation knowledge to help you make better decisions about why or why not to capture live memory. It also gives you hands on experience using a number of freely available RAM capture tools and covers the advanced topic of using Inception.Learn why RAM extractions are important and how the data can affect your case.Practical exercises give you hands on experience with different RAM extraction tools.Learn how to evaluate and benchmark your RAM capture tools.Learn how to use PALADIN to launch INCEPTION to gain access to password protected systems in order to extract RAM.Learn all of this in about one hour using all freely available tools.
