HomeFree courses
Every course is free. You only pay to certify.
Written lessons with diagrams and tables, guided labs on public forensic images, and knowledge checks at the end of each lesson. Sign in to track your progress.
DFF
Digital Forensics Foundation
The common ground of every digital investigation: how evidence is identified, acquired, preserved, analysed and reported without losing its integrity.
Digital evidence fundamentalsLegal and ethical principlesIdentification and seizureAcquisition and integrityChain of custody and documentationAnalysis fundamentalsReporting basics
CFX
Computer Forensic Examiner
Examination of computers and their storage: file systems, operating system artifacts, timelines and the traces users and attackers leave behind.
File systemsWindows artifactsTimeline analysisBrowser, email and cloud syncMemory and volatile datamacOS and Linux essentialsAnti-forensics
MFX
Mobile Forensic Examiner
Examination of Android and iOS devices: acquisition methods and their limits, app and system artifacts, messaging, location and media.
Mobile platforms and security modelsAcquisition methodsAndroid artifactsiOS artifactsMessaging and social appsLocation, media and metadataValidation and limitations
FRET
Forensic Report & Expert Testimony
Turning technical findings into a report that a judge, a lawyer or a jury can rely on, and defending it under questioning.
Forensic methodologyReport structureFindings, limitations and confidenceAnswering questions from courts and partiesVisual exhibitsTestimony and cross-examinationEthics and impartiality