Time

30 minutes

Difficulty

Beginner

CEU/CPE

This course covers how to edit the configuration of an Evimetry Deadboot dongle so that we can automatically boot a target system to a WIFI network. The course also covers managing the forensic imaging process over a wireless network and what to do if you lose connection to a running Evimetry forensic acquisition from the Evimetry Controller.

Create Free Account

NEED TO TRAIN YOUR TEAM? LEARN MORE

Already have an account? Sign In »

1.1 Introduction

2.1Edit the Evimetry Deadboot USB Dongle

2.2Add Your SSID and Passphrase

3.1Wi-Fi Hardware and the Connection Process

3.2Executing the Acquisition Using a Wireless Network

1 minute

4.1Course Summary

Prerequisites

Before any forensic acquisition you must document the evidence
See my Cybrary course: “Evidence Handling: Do it the Right Way”
See my Cybrary course: “Basic Evimetry Deadboot Forensic Acquisition: Wired & Local”
Internet connected computer
An evaluation copy of Evimetry
An “evidence” computer or drive
A USB thumb drive for booting
A Wi-Fi Network
A DHCP source
A storage drive (USB3 External)

Course Goals

By the end of this course, students should be able to:

How to edit the Evimetry Deadboot Dongle for Wi-Fi
Use Wi-Fi Dongles that work
How to use the Evimetry Deadboot USB dongle and Evimetry Controller to manage a forensic acquisition across a Wi-Fi network.