How the training runs on Skool
Join the group
Create a free Skool account, open the DFIR.com group and request to join. Skool handles your account and group access. Joining the group does not mean every module has been released.
Free and paid
Module 00 in each track opens to all group members for free as it releases. Paid membership opens with the first paid modules on December 14, 2026 and unlocks the remaining modules as they release, not the entire planned catalog on that date. Billing, renewals, cancellation and refunds run through Skool under Skool's terms. See membership details before purchasing.
Classroom
Released modules appear under Classroom in the Skool group. Each released lesson will link back to its module page here. Labs run on SIFT; each module states its setup requirements and any costs before you start.
Coming back
The module table on each track page shows what is released and what remains planned. Keep DFIR.com bookmarked for the catalog, SIFT and provenance records, and use Skool for lessons and community.
The examiner's work
starts with the evidence.
Last reviewed