Forensics & IR
Beginner
Triage & Live Response
Volatile data, running processes, persistence mechanisms, indicators of compromise.
0/4 modules complete · 0%
- 1Quiz+90 XP
IR Concepts Quiz: Volatile Data & Response Fundamentals
This quiz validates your understanding of incident response fundamentals, volatile data collection, and the IR lifecycle. You must demonstrate knowledge of triage principles, chain of custody, and core forensic concepts.
open quiz - Hands-on Labeasy+30 XP
Live Process Triage
Examine `ps aux` + `netstat` output. One process is exfilling data to the internet.
complete the module above first - Hands-on Labeasy+35 XP
Windows Event-Log Triage
Parse 50 Windows Security events. One records a successful logon from an external IP.
complete the module above first - Hands-on Labeasy+35 XP
Volatile Memory Acquisition
Acquire RAM from a running host without writing to the target's own disk (anti-contamination).
complete the module above first
Sign in to track your progress.
sign in