Basic Evimetry Deadboot Forensic Acquisition: Wireless Network

Name: Basic Evimetry Deadboot Forensic Acquisition: Wireless Network
Rating: 5 (3 reviews)

Cybrary

Course

This course covers how to edit the configuration of an Evimetry Deadboot dongle so that we can automatically boot a target system to a WIFI network. The course also covers managing the forensic imaging process over a wireless network and what to do if you lose connection to a running Evimetry forensic acquisition from the Evimetry Controller.

Time

30 minutes

Difficulty

Beginner

CEU/CPE

5.0

NEED TO TRAIN YOUR TEAM? LEARN MORE

Join over 3 million cybersecurity professionals advancing their career

Facebook

Google

Microsoft

Already have an account? Sign In »

Course Content

Module 1: Introduction

1.1 Introduction

Module 2: Preparing for the Acquisition

2.1Edit the Evimetry Deadboot USB Dongle

2.2Add Your SSID and Passphrase

Module 3: Using Evimetry Deadboot for Wireless Forensic Acquisition

3.1Wi-Fi Hardware and the Connection Process

3.2Executing the Acquisition Using a Wireless Network

Module 4: Course Summary

4.1Course Summary

1 minute

Course Description

Prerequisites

Before any forensic acquisition you must document the evidence
See my Cybrary course: “Evidence Handling: Do it the Right Way”
See my Cybrary course: “Basic Evimetry Deadboot Forensic Acquisition: Wired & Local”
Internet connected computer
An evaluation copy of Evimetry
An “evidence” computer or drive
A USB thumb drive for booting
A Wi-Fi Network
A DHCP source
A storage drive (USB3 External)

Course Goals

By the end of this course, students should be able to:

How to edit the Evimetry Deadboot Dongle for Wi-Fi
Use Wi-Fi Dongles that work
How to use the Evimetry Deadboot USB dongle and Evimetry Controller to manage a forensic acquisition across a Wi-Fi network.

Instructed By