🇺🇸USA HQ · Serving 40+ Countries All Systems Operational
security@shieldcoresec.com ·24/7 SOC Operations
Services Academy Contact
Get Free Consultation
Digital Forensics & Incident Response
Academy›Digital Forensics & Incident Response
SELF-PACED · 12 WEEKS · GCFA ALIGNED

Digital Forensics & Incident Response

Memory forensics, disk imaging, malware triage, timeline reconstruction, and full incident response workflows. Real-world case studies from major breaches. GCFA and GCFE exam-aligned.

Memory ForensicsDisk ImagingMalware TriageTimeline AnalysisGCFA PrepVolatility
Enroll Now Get Free Guidance →
12
Weeks
Real
Case Studies
GCFA
Aligned
Lifetime
Access
Curriculum

Full Course Outline

11 modules · Practical labs throughout · Real-world case studies

01
DFIR Fundamentals
Incident response lifecycle, evidence handling, chain of custody, legal considerations
3h
02
Disk Forensics
FTK Imager, Autopsy, file system analysis, deleted file recovery, artifact examination
6h
03
Memory Forensics
Volatility 3 — process analysis, network artifacts, malware detection, credential extraction
6h
04
Windows Artifact Analysis
Registry forensics, event logs, prefetch, shellbags, LNK files, browser artifacts
5h
05
Network Forensics
PCAP analysis, Wireshark, NetworkMiner, C2 traffic identification, data exfiltration detection
5h
06
Malware Triage
Sandbox analysis, YARA rules, IOC extraction, basic static analysis without reverse engineering
5h
07
Timeline Analysis
log2timeline/Plaso, Timesketch, super timeline creation, event correlation
5h
08
Ransomware Investigations
Ransomware artifact analysis, encryption identification, threat actor attribution
4h
09
Cloud Forensics
AWS CloudTrail, Azure AD logs, O365 forensics, cloud-native artifact analysis
4h
10
Reporting & Expert Testimony
Writing forensic reports, executive summaries, and preparing for legal proceedings
3h
11
Capstone Case — Real Breach
Full investigation of a simulated nation-state intrusion from initial detection to report
8h
Sarah Chen
GREM · GCFA · GCFE

Former CrowdStrike Intelligence analyst. 10 years DFIR and malware analysis. Responded to nation-state intrusions and major ransomware incidents. Trained 2,400+ students globally.

Enroll in This Course Get Free Career Guidance →
Who This Is For

Is This Right for You?

Security analysts wanting to specialise in DFIR
Incident responders looking to formalise their forensics skills
Anyone studying for GCFA, GCFE, or CHFI certifications
SOC analysts who handle escalated incidents
IT professionals responding to security incidents in their organisation
Prerequisites

What You Need to Start

Completion of Defensive Security course recommended (not required)
Basic understanding of Windows and Linux operating systems
Familiarity with command line is helpful but not required
Open to Complete Beginners
No degree required. No age limit. If you can use a computer and commit the time, we'll teach you everything else.
Ready to start this course?
Not sure? Get a free 30-minute career guidance call with one of our instructors.
Enroll Now →Free Career Guidance
Keep Learning

You Might Also Like

Defensive Security & SOC Operations

Build the SOC foundation before specialising in DFIR investigations.

View Course →

Malware Analysis & Reverse Engineering

Take your malware triage skills to the next level with full reverse engineering.

View Course →
View All Programs →
JUNE 2026 · 24 SEATS ONLY

Start Your Journey.
Land a $100K+ Role in 6 Months.

No tech background needed. No age limit. Just commitment — and we'll handle everything else, including getting you hired.

Enroll Now — June Cohort Get Free Career Guidance →
No income share · Cancel anytime · Career support until hired