Welcome to DFIR Training!

There is more DFIR goodness at DFIR.training than you can digest in one sitting, whether you have been in the field for a decade or just beginning to start your path into field!

Take advantage of everything you find on the site, and come back every time you need the most general to the most specific information. All the information is free, regularly updated, and is the most comprehensive source of Digital Forensics - Incident Response curation on the Internet.

What can you do at DFIR.training?

Find a job .

Find a DFIR college degree .

Network with the community with social media , blogs , podcasts , and more .

Search for a DFIR software or hardware tool .

Use templates for forms , policies , affidavits , reports for your own use.

Download keyword search term lists for drugs , violence , porn , applications , crimes , and use pre-made regular expressions .

Find an event that you need, whether in the classroom or virtually online, anywhere in the world.

Research forensic artifacts and match a forensic tool to analyze the artifact.

Research the field or a specific forensic artifact or investigative method through white papers , journals , and books.

Use the DFIR glossary that includes citations that you can use in your reports and affidavits.

Something missing?

I am constantly adding information to the website, but I certainly don't know everything and can easily (inadvertently) overlook information that should be here. If you find that to be the case, send me a note and let me know! I want to add it!

On top of that, if there is something that you think others in the field can benefit from, and you want to share your work, I will freely host it here for you, giving any credit that you would like (some prefer to be anonymous, others prefer fame; your choice).