Back to Learning Paths
DFIR

Digital Forensics and Incident Response

Establish an incident-response workflow and investigate evidence across desktop, mobile, browser, removable-media, and malware sources.

FamilyDefensive Security Operations
LevelFoundational to intermediate
Courses11
Estimated time2.75-3.7 hours
Audience

Incident responders, Forensic analysts, Blue team practitioners

Outcome

Establish an incident-response workflow and investigate evidence across desktop, mobile, browser, removable-media, and malware sources.

Ordered sequence

Courses in this path

11 courses
Course 0110 modules
Introduction to Digital Forensics and Incident Response

Open course in the Digital Forensics catalog: Introduction to Digital Forensics and Incident Response.

Launch Course
Course 0210 modules
What is Incident Response Lifecycle

Open course in the Explainers catalog: What is Incident Response Lifecycle.

Launch Course
Course 0310 modules
Building a DFIR Toolkit

Open course in the Digital Forensics catalog: Building a DFIR Toolkit.

Launch Course
Course 0410 modules
Windows Forensics Fundamentals

Open course in the Digital Forensics catalog: Windows Forensics Fundamentals.

Launch Course
Course 0510 modules
Linux Forensics Fundamentals

Open course in the Digital Forensics catalog: Linux Forensics Fundamentals.

Launch Course
Course 0610 modules
macOS Forensics Fundamentals

Open course in the Digital Forensics catalog: macOS Forensics Fundamentals.

Launch Course
Course 0710 modules
Android Forensics Fundamentals

Open course in the Digital Forensics catalog: Android Forensics Fundamentals.

Launch Course
Course 0810 modules
iPhone Forensics Fundamentals

Open course in the Digital Forensics catalog: iPhone Forensics Fundamentals.

Launch Course
Course 0910 modules
Browser Forensics Fundamentals

Open course in the Digital Forensics catalog: Browser Forensics Fundamentals.

Launch Course
Course 1010 modules
USB and Removable Media Analysis

Open course in the Digital Forensics catalog: USB and Removable Media Analysis.

Launch Course
Course 1110 modules
Static Malware Analysis Fundamentals

Open course in the Digital Forensics catalog: Static Malware Analysis Fundamentals.

Launch Course
Related routes
Next steps