Digital forensics primer (DFIR 1.0.1)

hosted by CIRCL

CIRCL/SMILE g.i.e, HSBC building, 2nd floor

Start: 28 Mar 2019

End: 28 Mar 2019

  • Event description

    Forensic Analysis is based on the assumption that everything leaves a trace behind. A trace in an information system can be any data that helps to identify space and time actions. Post mortem analysis is a key tool to discover and analyse security incidents. This course will teach the participant on how to find answers to what has happened by analysing different layer from the physical medium to the file system up to the application level.

    • Perform disk acquisition the right way
    • Introduce to file system analysis (NTFS/FAT)
    • Analyse operating system artifacts (MS Windows)
    • Find evidences in communication applications (e.g. browser or chat history)
    • Forensic correlation with threat intelligence platform like MISP
  • Register to this free training

    The event is over. It is not possible to purchase tickets anymore.This event used XING Events for online ticketing. Start to organise your own events in an effective and professional way.
    Test it now

    * incl. legal VAT
  • Costs of the training

    This training is free-of-charge but there is a no-show fee of 40,- EUR if you register and don’t join us for the training without cancellation. 

  • Practical information


    We encourage you to bring a laptop running Linux, either natively or in a virtual machine. An installation of Kali Linux is perfect. Please also download the material from

    Who benefits most from this training:

    • Employees of the IT department 
    • Local Incident Response Team
    • IT security/DFIR interested


    Knowledge of operating systems and IT security is required


    This is an 8 hours training.

    What is included:

    • Training material
    • Beverages
    • Light lunch

    Language of the course:

    The course is given in English.

  • About CIRCL

    The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven initiative designed to provide a systematic response facility to computer security threats and incidents. CIRCL, a department of SECURITYMADEIN.LU, is the CERT for the private sector, communes and non-governmental entities in Luxembourg.

    More information about:

  • More events

    Event title Event venue Date Registration
    MISP Training (Prague) - Threat Intelligence Analyst and Administrators Conference center GreenPoint, s. r. o. 10 September 2020 09:00 Registration
    MISP Training (Prague) - Hands-on workshop for analysts and MISP users Conference center GreenPoint, s. r. o. 11 September 2020 Registration


Or share this link:


  • Venue & Access

    Event venue address

    CIRCL/SMILE g.i.e, HSBC building, 2nd floor 16, Boulevard d'Avranches 1160 Luxembourg Luxembourg


    Our training rooms are located close to the train station of Luxembourg city and excellently accessible, especially by public transport. How to reach us? by Car Closest Parkings: Rocade, Saint-Esprit, Nobilis, Gare, Kons by Bus Closest bus stops: Al Molkerei: 19, 117, 159, 160, 162, 163 Al Avenue: 19 Wallis: 3, 5, 6, 15, 30  by Bike Closest Vel'oh station: #4 (Rocade)
    Wheelchair friendly Unknown
powered by XING Events

Event organiser: CIRCL
More participants thanks to online event management solutions from XING Events.