You're reading from Digital Forensics with Kali Linux Enhance your investigation skills by performing network and memory forensics with Kali Linux 2022.x

Product type Paperback

Published in Apr 2023

Publisher Packt

ISBN-13 9781837635153

Length 414 pages

Edition 3rd Edition

Tools

Kali Linux

Concepts

Cybersecurity

Author (1):

Shiva V. N. Parasram

View More author details

Table of Contents (24) Chapters

Preface

1. Part 1: Blue and Purple Teaming Fundamentals

2. Chapter 1: Red, Blue, and Purple Teaming Fundamentals FREE CHAPTER

3. Chapter 2: Introduction to Digital Forensics

4. Chapter 3: Installing Kali Linux

5. Chapter 4: Additional Kali Installations and Post-Installation Tasks

6. Chapter 5: Installing Wine in Kali Linux

7. Part 2: Digital Forensics and Incident Response Fundamentals and Best Practices

8. Chapter 6: Understanding File Systems and Storage

9. Chapter 7: Incident Response, Data Acquisitions, and DFIR Frameworks

10. Part 3: Kali Linux Digital Forensics and Incident Response Tools

11. Chapter 8: Evidence Acquisition Tools

12. Chapter 9: File Recovery and Data Carving Tools

13. Chapter 10: Memory Forensics and Analysis with Volatility 3

14. Chapter 11: Artifact, Malware, and Ransomware Analysis

15. Part 4: Automated Digital Forensics and Incident Response Suites

16. Chapter 12: Autopsy Forensic Browser

17. Chapter 13: Performing a Full DFIR Analysis with the Autopsy 4 GUI

18. Part 5: Network Forensic Analysis Tools

19. Chapter 14: Network Discovery Tools

20. Chapter 15: Packet Capture Analysis with Xplico

21. Chapter 16: Network Forensic Analysis Tools

22. Index

Why subscribe?

23. Other Books You May Enjoy

Drive and memory acquisition using FTK Imager in Wine

There are several tools for Windows systems that you may wish to take advantage of to be able to capture the memory and paging files on a Windows device. The forensic images can then be opened on your Kali machine for analysis, using Volatility 3 for memory analysis and Autopsy for drive analysis. Let’s first look at installing and using FTK Imager within Wine in Kali Linux.

Installing FTK Imager

FTK (Forensic Toolkit) Imager is a free Windows tool for the live acquisition of memory (RAM), the paging file, and drive images.

Follow these steps to install FTK Imager in Kali Linux to create forensic acquisitions:

First, download FTK Imager from the official website at https://go.exterro.com/l/43312/2022-08-23/f7rytx. Enter all relevant detail on the registration page. Once all fields are completed, click on the Submit button, and you will be prompted to download the application.
Once downloaded, click on...

The rest of the chapter is locked

You're reading from Digital Forensics with Kali Linux Enhance your investigation skills by performing network and memory forensics with Kali Linux 2022.x

Table of Contents (24) Chapters

Drive and memory acquisition using FTK Imager in Wine

Installing FTK Imager

Authors (1)

Personalised recommendations for you

You're reading from Digital Forensics with Kali Linux Enhance your investigation skills by performing network and memory forensics with Kali Linux 2022.x

Table of Contents (24) Chapters

Drive and memory acquisition using FTK Imager in Wine

Installing FTK Imager

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you