Kaspersky, a cybersecurity giant, has added a new weapon to its arsenal in the fight against cybercrime – a comprehensive digital forensics course. This program, aimed at bolstering the skillset of information security (InfoSec) professionals, dives deep into the crucial world of digital evidence collection and analysis.
The impetus for this initiative stems from a worrying trend – the growing prevalence of protracted cyberattacks. According to Kaspersky, over 20% of cyberattacks in 2023 lingered for more than a month, highlighting the urgent need for streamlined incident response strategies. A key bottleneck in this process, as identified by Kaspersky, is the lack of readily available expertise.
Kaspersky’s ‘Windows Digital Forensics’ course tackles this challenge head-on, equipping participants with the foundational knowledge and practical experience needed to navigate the complex world of digital forensics. The course emphasizes the importance of this skillset, underscoring the reality that even the most robust preventative measures cannot guarantee complete immunity to cyberattacks.
Participants will be trained in the art of acquiring diverse digital evidence, uncovering the fingerprints of malicious activity, and meticulously reconstructing the timeline of an incident by piecing together timestamps from various Windows artifacts. The curriculum also delves into browser and email history analysis, empowering professionals to gather a holistic understanding of the attack.
By the course’s conclusion, graduates will possess a comprehensive skillset encompassing incident scoping, evidence acquisition, log file analysis, network analysis, crafting Indicators of Compromise (IoCs), and the intricacies of memory forensics. This newfound expertise will prove invaluable in minimizing the impact of cyberattacks through swift containment, analysis, and recovery efforts.
This course is the latest addition to Kaspersky’s expanding suite of incident response training programs, offering InfoSec professionals a structured learning path in this critical domain. The program caters to both organizations seeking to fortify their incident response teams and individual security specialists aspiring to refine their technical and analytical prowess in digital forensics.
The course curriculum is the brainchild of Ayman Shaaban, a leading figure in Kaspersky’s digital forensics and incident response team. Shaaban emphasizes the critical role digital forensics plays in bolstering an organization’s cyber resilience.
“Centralized log management with extended retention periods and robust security safeguards are paramount for achieving cyber resilience,” says Shaaban. “The ability to conduct prompt forensic investigations is equally crucial. This course equips participants with the knowledge and tools to swiftly handle, contain, and recover from cyberattacks, minimizing their impact in the most efficient manner possible.”
