Digital Forensics & Malware Analysis
For learners who already read logs and understand networking: handle evidence correctly, reconstruct incidents from disk, memory and log artifacts, and safely triage suspicious files into verdicts, IOCs and containment advice.
- Courses
- 2
- Study time
- 17 hours
- Lessons
- 10
- Practice labs
- 10
- Assessments
- 4
Courses in this path
Take them in this order. Each one has lessons, practice labs and an assessment.
Digital Forensics & Incident Response
Learn to run an incident the way a government CSIRT does: follow the NIST incident response lifecycle, handle evidence so it survives scrutiny, and…
5 lessons, 5 labs, 2 assessments
View course →Malware Analysis Fundamentals
Learn how analysts safely triage a suspicious file: build an isolated environment, run static and dynamic analysis, extract indicators of…
5 lessons, 5 labs, 2 assessments
View course →What you will be able to do
A sample of the skills the courses in this path teach.
- Describe the NIST SP 800-61 incident response phases and state which actions belong to each
- Apply the order of volatility and chain-of-custody rules to a seized device
- Describe the controls of a safe, isolated malware analysis environment
- Triage a sample statically: hashes, strings, imports, sections and signs of packing
Before you start
Comfortable reading Windows and Linux logs; networking basics (IP, DNS, HTTP); path courses on log analysis recommended.
Finish every lesson, lab and assessment of a course and you can claim a digitally signed certificate. Finish every course in the path and you can claim a path certificate too.