How to Learn Forensics Roadmap

Are you trying to learn how to do forensics, whether for a CTF challenge or for a DFIR job?

This is our recommendation for a starting point.

From the Roppers CTF Course:

• Complete File Forensics.
• Complete Host and Memory Forensics
• Complete Network Forensics

There is a lot to learn here, but this is a decent start.

While you’re doing those courses, check out DFIR Diva’s Page on Getting into DFIR.