Part 3: Kali Linux Digital Forensics and Incident Response Tools

Here’s the fun part. From this point on, we’ll have a hands-on approach with practical labs. In this section, we will first learn how to use various tools for the forensic acquisition of memory (RAM) and storage media. We will then move on to file recovery and data carving tools, and finally, delve into the analysis of memory dumps, and perform different types of artifact analysis.

This part has the following chapters:

• Chapter 8, Evidence Acquisition Tools
• Chapter 9, File Recovery and Data Carving Tools
• Chapter 10, Memory Forensics and Analysis with Volatility 3
• Chapter 11, Artifact, Malware, and Ransomware Analysis