Module 1

Before the course

1. 1.(W00) Course Instructions

Module 2

Module 1

1. 1.(W42M01) An introduction to Ubuntu
2. 2.(W42M02) Installation
3. 3.(W42M03) Basic Linux Commands
4. 4.(W42M04) Setting up an Ubuntu forensic workstation
5. 5.(W42M05) Useful commands in forensic activities
6. 6.(W42M06) Working on Ubuntu forensic images
7. 7.(W42M07) The SleuthKit
8. 8.(W42M08) Metadata analysis with Exiftool
9. 9.(W42M09) Exiftool - video

Module 3

Module 2

1. 1.(W42M00) LiME
2. 2.(W42M00) Extracting files
3. 3.(W42M12) Collecting volatile data
4. 4.(W42M13) User information
5. 5.(W42M14) Workstation information
6. 6.(W42M15) Network information
7. 7.(W42M16) Boot sequence analysis
8. 8.(W42M17) Scheduled tasks
9. 9.(W42M18) Applications
10. 10.(W42M19) Recent files
11. 11.(W42M20) Nautilus and GNOME
12. 12.(W42M21) Thumbnails

Module 4

Module 3

1. 1.(W42M24) Firefox
2. 2.(W42M25) The SQL Query Language
3. 3.(W42M00) SQLite
4. 4.(W42M26) Firefox artifacts
5. 5.(W42M27) Thunderbird
6. 6.(W42M28) Thunderbird artifacts
7. 7.(W42M29) Collecting Account Passwords
8. 8.(W42M00) Mail Parser

Module 5

Module 4

1. 1.(W42M32) An introduction to eCryptfs
2. 2.(W42M33) eCryptfs on Ubuntu
3. 3.(W42M34) How to encrypt folders and files
4. 4.(W42M35) How to mount an encrypted folder
5. 5.(W42M00) Mount a private folder
6. 6.(W42M36) John the Ripper
7. 7.(W42M37) Creating a wordlist with Bulk Extractor
8. 8.(W42M00) A dictionary attack

Module 6

Final Exam

1. 1.(W42M00) Course publication schedule