Skip to content
Pre-launch / First modules December 14, 2026.Lessons and community run on Skoolhttps://www.skool.com/dfir
Learning paths / in preparation

Pick the case.
Learn the evidence.

Each path is planned as a Skool Classroom course with hands-on labs on SIFT, case-based practice questions, and a named author on every module. No path is open yet.

The first three paths

13 MODULESFirst modules December 14, 2026

Windows Forensic Examiner

Windows artifacts, user activity and evidence reporting.
Labs on SIFT
13 MODULESFirst modules: date to be announced

Incident Response and Threat Hunting

Intrusion scoping, memory analysis and investigative timelines.
Labs on SIFT
13 MODULESFirst modules: date to be announced

Smartphone Forensics

Android, iOS and cross-device evidence analysis.
Labs on SIFT

Module lists are drafts and may change before launch.

Last reviewed