Basic Evimetry Deadboot Forensic Acquisition: Wireless Network

Prerequisites

• Before any forensic acquisition you must document the evidence
• See my Cybrary course: “Evidence Handling: Do it the Right Way”
• See my Cybrary course: “Basic Evimetry Deadboot Forensic Acquisition: Wired & Local”
• Internet connected computer
• An evaluation copy of Evimetry
• An “evidence” computer or drive
• A USB thumb drive for booting
• A Wi-Fi Network
• A DHCP source
• A storage drive (USB3 External)

Course Goals

By the end of this course, students should be able to:

• How to edit the Evimetry Deadboot Dongle for Wi-Fi
• Use Wi-Fi Dongles that work
• How to use the Evimetry Deadboot USB dongle and Evimetry Controller to manage a forensic acquisition across a Wi-Fi network.

• Module 1: Introduction
• 1.1 Introduction
• Module 2: Preparing for the Acquisition
• 2.1 Edit the Evimetry Deadboot USB Dongle
• 2.2 Add Your SSID and Passphrase
• Module 3: Using Evimetry Deadboot for Wireless Forensic Acquisition
• 3.1 Wi-Fi Hardware and the Connection Process
• 3.2 Executing the Acquisition Using a Wireless Network
• Module 4: Course Summary
• 4.1 Course Summary