You're reading from Digital Forensics with Kali Linux Perform data acquisition, data recovery, network forensics, and malware analysis with Kali Linux 2019.x

Product type Paperback

Published in Apr 2020

Publisher Packt

ISBN-13 9781838640804

Length 334 pages

Edition 2nd Edition

Tools

Kali Linux

Concepts

Forensics

Author (1):

Shiva V. N. Parasram

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: Kali Linux – Not Just for Penetration Testing

2. Chapter 1: Introduction to Digital Forensics FREE CHAPTER

3. Chapter 2: Installing Kali Linux

4. Section 2: Forensic Fundamentals and Best Practices

5. Chapter 3: Understanding Filesystems and Storage Media

6. Chapter 4: Incident Response and Data Acquisition

7. Section 3: Forensic Tools in Kali Linux

8. Chapter 5: Evidence Acquisition and Preservation with dc3dd and Guymager

9. Chapter 6: File Recovery and Data Carving with foremost, Scalpel, and bulk_extractor

10. Chapter 7: Memory Forensics with Volatility

11. Chapter 8: Artifact Analysis

12. Section 4: Automated Digital Forensic Suites

13. Chapter 9: Autopsy

14. Chapter 10: Analysis with Xplico

15. Chapter 11: Network Analysis

16. Other Books You May Enjoy

Starting Xplico in DEFT Linux 8.2

Should you find great difficulty in installing Xplico, another option would be to use DEFT Linux 8.2, which can be run either as a live OS or as a virtual host. This process is not as in-depth as installing Kali Linux (as covered in Chapter 2, Installing Kali Linux) because DEFT can be used as a live forensic acquisition distribution.

You can download DEFT 8.2 from https://na.mirror.garr.it/mirrors/deft/iso/, then open VirtualBox, click New, and enter the following details:

Name: Deft 8.2
Type: Linux
Version: Ubuntu (64-bit)

The following figure shows the options selected:

Figure 10.8 – DEFT Linux virtual machine details

Now, after filling in the appropriate information, follow these steps:

Assign four or more GBs of RAM.
Leave the default option of Create a virtual hard disk now and click Create.
Leave the default option of VDI (VirtualBox Disk Image) and click Next.
Leave...