Linux and Cloud DFIR, Automation and more | 2 Days Live BootCamp | Register Now

Join me in 2 Days Live BootCamp where we will teach Linux and Cloud DFIR, Automation and more.

Registration Link- https://academy.blackperldfir.com/learn/ir-bootcamp
Date: 28th and 29th March, 2026
Time: 12PM to 4PM IST

Course Overview
1. This intensive 2-day hands-on bootcamp is designed to help security professionals understand and perform Incident Response on Linux systems and AWS cloud environments.
2. Participants will learn how to detect anomalies, investigate Linux logs, perform live incident response, collect forensic evidence, analyze Linux memory, and automate response workflows in AWS.
3. The session also includes real-world investigation techniques, automation strategies, threat hunting methods, and a final CTF challenge to test the knowledge gained during the bootcamp.

Topics:
1. Understanding Linux for Detection Response.
2. Get deep anomaly combination for Linux usecases with: Identify EXECVE, Syscall anomaly, privilege escalation with SUID Abuse, SSH key persistent.
3. Get deep understanding of reading and analyzing Linux auth, audit, syslog.
4. Doing Live Incident Response with Linux. Setting up EDR, Live Analysis with scripts.
5. Doing Incident Response in AWS. Understood AWS CLI for doing Incident Response.
6. Automate IR workflow with GuardDuty, AWS Lambda, AWS Event Bridge and Slack.
7. Doing Threat Hunt on AWS with Jupyter.
8. Remote Evidence collection from Linux Endpoint. Automation of
9. Evidence Collection.
10. Gather Linux Memory.
11. Analyze Linux Memory for comprise assessment.
12. Interview tips for Linux/IR based scenarios.
13. Final CTF.

Ideal For
1. SOC Analysts
2. DFIR Analysts
3. Cloud Security Engineers
4. Threat Hunters
5. Security Researchers
6. Cyber Security Students
7. Professionals preparing for Linux Incident Response or Cloud Security roles

What You Will Get:
1. Linux IR cheatsheet
2. Dataset for your practice
3. Automation scripts
4. AWS scripts
5. Interview tips library
6. Lifetime Recording for 2 days of Recording
7. Course completion Certificate upon completing the CTF
8. CPE hours

Assessment & Certification:
1. Participants will complete a Final CTF (Capture The Flag) based on real-world Linux and Cloud Incident Response scenarios.
2. Upon successfully completing the challenge, participants will receive a Bootcamp Completion Certificate and CPE hours.

Видео Linux and Cloud DFIR, Automation and more | 2 Days Live BootCamp | Register Now канала BlackPerl