Membership

Live Analysis with Rekall (W25)

Explore live analysis and memory investigation with Rekall. Study memory-acquisition and analysis concepts through the tools and examples in the course. This is an earlier course edition; examples reflect the tools and versions used when it was recorded.

Instructor · Dr. Paulo Henrique

Modules:
6
Lessons:
15

eForensics learning

Practical skills.
Verified progress.

What you'll learn

  • Use Rekall in a memory-analysis workflow.
  • Explore acquisition of memory evidence from active systems.
  • Analyze signs of malicious activity in memory.

Prerequisites

Recommended preparation: familiarity with basic computer operation and the topic areas listed in the course outline. Review the first module before starting the practical exercises. Equipment and software: All exercises and labs can be performed on machines running Windows, Linux, or Apple, as well as in virtual machines.

Module 6

Module 4

  1. 1. (W25M09) The evil inside a Windows machine - module notes

  2. 2. (W25M10) Module 4 Instructional Videos

  3. 3. (W25M11) Module 4 Memory Image Downloads

Assessments

Assignment Required

(W25A09) Module 4 Practical Labs Part 1, Lab 1

Assignment Required

(W25A10) Module 4 Practical Labs Part 1, Lab 2

Assignment Required

(W25A11) Module 4 Practical Labs Part 1, Lab 3

Assignment Required

(W25A12) Module 4 Practical Labs Part 1, Lab 4

Assignment Required

(W25A12) Module 4 Practical Labs Part 2

Assignment Required

(W25A13) Module 4 Practical Labs Part 3

Assignment Required

(W25A14) Module 4 Practical Labs Part 4

Assignment Required

(W25A15) Module 4 Practical Labs Part 5

Module 7

Final Quiz and Course Wrap-Up

Lessons will appear here after course content is added.

Assessments

Quiz Required

(W25Q01) Live Analysis with Rekall Final Quiz

Course access

Unlock Live Analysis with Rekall (W25).

Enter your email. We’ll send a sign-in code here without taking you away from this course.