SDF: Weblog Forensics

SDF: Weblog Forensics, available at $54.99, has an average rating of 4.65, with 42 lectures, 1 quizzes, based on 172 reviews, and has 1049 subscribers.

You will learn about Understand weblog fundamentals from a DFIR point-of-view Understand weblog components for their investigative value Be able to create custom IOC sweeps Be able to create frequency analysis sweeps Be able to create attack pattern sweeps Be able to automate the sweeps into a single, simple script This course is ideal for individuals who are Computer Forensic Analysts or Incident Response Analyst or IT Security analysts or IT professionals or Students It is particularly useful for Computer Forensic Analysts or Incident Response Analyst or IT Security analysts or IT professionals or Students.

Enroll now: SDF: Weblog Forensics

Summary

Title: SDF: Weblog Forensics

Price: $54.99

Average Rating: 4.65

Number of Lectures: 42

Number of Quizzes: 1

Number of Published Lectures: 42

Number of Published Quizzes: 1

Number of Curriculum Items: 43

Number of Published Curriculum Objects: 43

Original Price: $39.99

Quality Status: approved

Status: Live

What You Will Learn

Understand weblog fundamentals from a DFIR point-of-view
Understand weblog components for their investigative value
Be able to create custom IOC sweeps
Be able to create frequency analysis sweeps
Be able to create attack pattern sweeps
Be able to automate the sweeps into a single, simple script

Who Should Attend

Computer Forensic Analysts
Incident Response Analyst
IT Security analysts
IT professionals
Students

Target Audiences

Computer Forensic Analysts
Incident Response Analyst
IT Security analysts
IT professionals
Students

Welcome to the Surviving Digital Forensics series. This class provides hands-on training that teaches weblog forensic triage techniques.

Learn weblog fundamentals from a DFIR point-of-view
Understand weblog components for their investigative value
Learn how to create custom IOC sweeps
Learn how to create frequency analysis sweeps using IP addresses, status codes, request methods, etc.
Learn how to create attack pattern sweeps for SQL injection, web shells, XSS and more
Learn how to automate the sweeps into a single, simple script

Course Curriculum

Chapter 1: Introduction

Lecture 1: Welcome to the SDF series

Lecture 2: Class Outline

Lecture 3: Class Tools & Downloads

Lecture 4: SIFT Workstation

Lecture 5: SIFT Details

Chapter 2: Understanding Weblogs

Lecture 1: Intro to Understanding Weblogs

Lecture 2: Artifact Overview

Lecture 3: Artifact location & log types

Lecture 4: HTTP Request Methods

Lecture 5: HTTP status codes

Lecture 6: Configuration file

Lecture 7: Forensic Breakdown

Chapter 3: Weblog Triage

Lecture 1: Intro to Weblog triage

Lecture 2: Investigative approaches

Lecture 3: Validate logging

Chapter 4: Case Intelligence Searches

Lecture 1: Intro to case intelligence searches

Lecture 2: IOC search part 1

Lecture 3: IOC search part 2

Chapter 5: Frequency analysis searches

Lecture 1: Intro to frequency analysis searches

Lecture 2: HTTP request method

Lecture 3: IP address

Lecture 4: HTTP status codes

Lecture 5: User agent

Lecture 6: Byte size

Chapter 6: Attack pattern searches

Lecture 1: Intro to attack pattern searches

Lecture 2: SQL injection 1

Lecture 3: SQL injection 2

Lecture 4: Web shells 1

Lecture 5: Web shells 2

Lecture 6: Cross-site scripting 1

Lecture 7: Cross-site scripting 2

Lecture 8: Base64 encoding

Lecture 9: Long URL

Lecture 10: Directory traversal

Lecture 11: Hex encoding

Chapter 7: Automating searches

Lecture 1: Intro to automating searches

Lecture 2: Script download

Lecture 3: Script overview

Lecture 4: Script demonstration

Lecture 5: Script breakdown

Chapter 8: Conclusion

Lecture 1: Conclusion

Lecture 2: Thank you!

Instructors

Michael Leclair
DFIR Professional

Rating Distribution

1 stars: 2 votes
2 stars: 4 votes
3 stars: 18 votes
4 stars: 59 votes
5 stars: 89 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!

Menu