H
150 Upgrade to Pro
12 days 150 Upgrade to Pro A Aravind
Blue Team

DFIR Analyst

Build blue team capability for the DFIR Analyst role with staged rooms, labs, projects and interview readiness.

Student Expert
Defensive Security Operations Endpoint

Novice-to-Master Stages

Novice Stage

Novice

Prerequisites: Core cybersecurity terminology, Basic web and network literacy

Terminologies Tech Stacks Coding Languages Logo & Branding Why Cybersecurity Matters CIA Triad & Defense in Depth Security Principles (Detailed)

Labs

  • Novice scenario walkthrough for DFIR Analyst
  • Novice hands-on room using role tools
  • Novice findings report and evidence capture

Projects

  • Build a dfir analyst portfolio artifact for the novice stage
  • Publish a short writeup connecting controls, findings and next steps

Student Stage

Student

Prerequisites: Novice stage checkpoint

Network Security (Full Guide) Network Pentesting (Full) Network Security Training Digital Forensics & Investigation Incident Response (IR) Digital Forensic Tools Ransomware & Malware Trends

Labs

  • Student scenario walkthrough for DFIR Analyst
  • Student hands-on room using role tools
  • Student findings report and evidence capture

Projects

  • Build a dfir analyst portfolio artifact for the student stage
  • Publish a short writeup connecting controls, findings and next steps

Pro Stage

Pro

Prerequisites: Student stage checkpoint

Windows Security & Hardening Linux Security & Hardening Endpoint Detection & Response (EDR/XDR) Server Security & Hardening Virtualization Security Email & Collaboration Security Patch & Vulnerability Management

Labs

  • Pro scenario walkthrough for DFIR Analyst
  • Pro hands-on room using role tools
  • Pro findings report and evidence capture

Projects

  • Build a dfir analyst portfolio artifact for the pro stage
  • Publish a short writeup connecting controls, findings and next steps

Expert Stage

Expert

Prerequisites: Pro stage checkpoint

Security Operations Center (SOC) Detection Engineering & Sigma Rules Malware Analysis & Reverse Engineering Vulnerability Management Program Attack Surface Management (ASM) Threat Hunting Cyber Resilience & SOAR

Labs

  • Expert scenario walkthrough for DFIR Analyst
  • Expert hands-on room using role tools
  • Expert findings report and evidence capture

Projects

  • Build a dfir analyst portfolio artifact for the expert stage
  • Publish a short writeup connecting controls, findings and next steps

Master Stage

Master

Prerequisites: Expert stage checkpoint

Labs

  • Master scenario walkthrough for DFIR Analyst
  • Master hands-on room using role tools
  • Master findings report and evidence capture

Projects

  • Build a dfir analyst portfolio artifact for the master stage
  • Publish a short writeup connecting controls, findings and next steps