← paths
Deep DiveIntermediate → Expert

Forensics

Reconstruct what happened after the breach.

Memory dumps, disk images, network captures. Learn to piece together the timeline of an attack and build the evidence chain that tells the full story.

your progress

0%complete
0 / 8 lessons3,000 XP total
Start Learning →
1

Digital Evidence Basics

0%
File System ForensicsLEARN18 min
Disk Image Analysis LabPRACTICE25 min
Knowledge Check: EvidenceCHECK8 min
2

Memory & Network Analysis

0%
PCAP Analysis BasicsPRACTICE22 min
Network Forensics LabPRACTICE28 min
Final Mission: Post-Breach ReconstructionMISSION45 min
your XP: 0
path XP: 3,000
missions: 15