Digital forensics primer (DFIR 1.0.1)

hosted by CIRCL

CIRCL/SMILE g.i.e, HSBC building, 2nd floor

Start: 28 Mar 2019

End: 28 Mar 2019

  • Event description

    Forensic Analysis is based on the assumption that everything leaves a trace behind. A trace in an information system can be any data that helps to identify space and time actions. Post mortem analysis is a key tool to discover and analyse security incidents. This course will teach the participant on how to find answers to what has happened by analysing different layer from the physical medium to the file system up to the application level.

    • Perform disk acquisition the right way
    • Introduce to file system analysis (NTFS/FAT)
    • Analyse operating system artifacts (MS Windows)
    • Find evidences in communication applications (e.g. browser or chat history)
    • Forensic correlation with threat intelligence platform like MISP
  • Register to this free training

    The event is over. It is not possible to purchase tickets anymore.This event used XING Events for online ticketing. Start to organise your own events in an effective and professional way.
    Test it now

    * incl. legal VAT
  • Costs of the training

    This training is free-of-charge but there is a no-show fee of 40,- EUR if you register and don’t join us for the training without cancellation. 

  • Practical information


    We encourage you to bring a laptop running Linux, either natively or in a virtual machine. An installation of Kali Linux is perfect. Please also download the material from

    Who benefits most from this training:

    • Employees of the IT department 
    • Local Incident Response Team
    • IT security/DFIR interested


    Knowledge of operating systems and IT security is required


    This is an 8 hours training.

    What is included:

    • Training material
    • Beverages
    • Light lunch

    Language of the course:

    The course is given in English.

  • About CIRCL

    The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven initiative designed to provide a systematic response facility to computer security threats and incidents. CIRCL, a department of SECURITYMADEIN.LU, is the CERT for the private sector, communes and non-governmental entities in Luxembourg.

    More information about:

  • More events

    Event title Event venue Date Registration
    MISP Training (Prague) - Threat Intelligence Analyst and Administrators Conference center GreenPoint, s. r. o. 17 September 2019 09:00 Registration
    MISP Training (Prague) - Developers session Conference center GreenPoint, s. r. o. 18 September 2019 09:00 Registration
    AIL training (Prague) Conference center GreenPoint, s. r. o. 19 September 2019 09:00 Registration
    MISP threat intelligence summit 0x5 Alvisse Parc Hotel Dommeldange 21 October 2019 10:00 Registration 2019 Alvisse Parc Hotel Dommeldange 22 October 2019 Registration
    Cybersecurity Week Luxembourg 2019 - Gala & Awards Night EXIT07 24 October 2019 17:30 Registration
    EU ATT&CK community workshop #4 Alvisse Parc Hotel Dommeldange 25 October 2019 Registration


Or share this link:


  • Venue & Access

    Event venue address

    CIRCL/SMILE g.i.e, HSBC building, 2nd floor 16, Boulevard d'Avranches 1160 Luxembourg Luxembourg


    Our training rooms are located close to the train station of Luxembourg city and excellently accessible, especially by public transport. How to reach us? by Car Closest Parkings: Rocade, Saint-Esprit, Nobilis, Gare, Kons by Bus Closest bus stops: Al Molkerei: 19, 117, 159, 160, 162, 163 Al Avenue: 19 Wallis: 3, 5, 6, 15, 30  by Bike Closest Vel'oh station: #4 (Rocade)
    Wheelchair friendly Unknown
powered by XING Events

Event organiser: CIRCL
More participants thanks to online event management solutions from XING Events.