How to Learn Forensics Roadmap
Are you trying to learn how to do forensics, whether for a CTF challenge or for a DFIR job?
This is our recommendation for a starting point.
From the Roppers CTF Course:
- Complete File Forensics.
- Complete Host and Memory Forensics
- Complete Network Forensics
There is a lot to learn here, but this is a decent start.
While you’re doing those courses, check out DFIR Diva’s Page on Getting into DFIR.