Learn techniques to attack, investigate, and analyze computer systems using Python
Improve your existing skills to conduct effective forensics investigations in new and interesting ways.
Think as an attacker to achieve results from Python forensics and implement solutions and techniques.
If you are a practitioner, security professional, or someone who just wants to know about digital forensics, then this course is for you. You will learn new and innovative ways of solving common forensics tasks and upgrade your experience with Python. Prior programming experience is beneficial but not required.
Python is uniquely positioned as a programming language to perform cyber investigations and perform forensics analysis. Unleash the power of Python by using popular libraries and Python tools to help you create efficient and thorough forensics investigations. This course will walk you through digital forensics on network traffic, host analysis, and memory analysis.
The course starts with network forensics, an important aspect of any investigation. You will learn to read, sort, and sniff raw packets and also analyze network traffic. These techniques will help you drive your host analysis. You will learn about tools you'll need to perform a complete investigation with the utmost efficiency in both Windows and GNU/Linux environments with Python. Next, you will learn more advanced topics such as viewing data in PE and ELF binaries. It's vital to analyze volatile memory during an investigation as it provides details about what is actually running on a given system. So, you will learn the best tools to obtain and analyze volatile memory images. Finally, you will learn how to use Python in order to think like an attacker. You will complete enumeration, exploitation, and data exfiltration.
The code bundle for this course is available at https://github.com/PacktPublishing/Recipes-to-Successful-Python-Digital-Forensics.