Digital Forensics and Incident Response courses
Find out what happened, prove it, and recover. DFIR training in Toronto covering Windows, Linux, macOS, mobile, network, and cloud investigations, memory forensics, malware analysis, and incident response that holds up to a regulator, an insurer, or a court.
14 courses · Entry-level · Core · Advanced · Live online
Entry-levelDigital Evidence Acquisition and Rapid Triage
Hands-on digital forensics training in Toronto covering defensible imaging, live triage, write blocking and hashing that stands up to challenge.
6 weeks · live online
Contact for pricingView outline
Entry-levelWindows Forensic Analysis
Windows forensics training in Toronto covering registry, execution artifacts, shell items, USB history, email and browsers through a full capstone case.
10 weeks · live online
Contact for pricingView outline
CoreAdvanced Incident Response and Threat Hunting
Threat hunting training for responders ready to find intrusions in progress using memory forensics, lateral movement evidence and super timeline analysis.
10 weeks · live online
Contact for pricingView outline
CoreEnterprise Cloud Forensics and Incident Response
Cloud DFIR training across AWS, Azure, GCP and Microsoft 365: what is logged, how to acquire it before retention expires, and how to rebuild an incident.
8 weeks · live online
Contact for pricingView outline
CoreRansomware and Cyber Extortion Response
Ransomware response training covering containment, blast radius scoping, exfiltration analysis, recovery sequencing and the realities of extortion.
8 weeks · live online
Contact for pricingView outline
CoreLinux Incident Response and Threat Hunting
Linux incident response training covering server, container and cloud workload artifacts, forensic timelines and the attacker techniques that matter on Linux.
8 weeks · live online
Contact for pricingView outline
CoreCyber Threat Intelligence
Threat intelligence training covering collection, structured analytic techniques, MITRE ATT&CK adversary tracking and reporting that changes real decisions.
8 weeks · live online
Contact for pricingView outline
CoreCybercrime Investigations
Cybercrime investigation training covering online personas, financial fraud, cryptocurrency tracing, dark web activity and workflows built for legal process.
8 weeks · live online
Contact for pricingView outline
CoreReverse Engineering Malware
Malware analysis training in Toronto taking you from behavioural triage into static and dynamic analysis of real Windows samples inside an isolated lab.
10 weeks · live online
Contact for pricingView outline
AdvancedmacOS and iOS Forensic Analysis
Apple forensics training covering APFS internals, macOS and iOS application artifacts, iCloud synchronisation and response on managed Mac fleets.
10 weeks · live online
Contact for pricingView outline
AdvancedAdvanced Network Forensics and Threat Hunting
Network forensics training covering full packet capture, flow analysis, encrypted traffic assessment and the evidence that survives when endpoints are wiped.
10 weeks · live online
Contact for pricingView outline
AdvancedSmartphone Forensic Analysis
Mobile forensics training across iOS and Android covering acquisition methods, application database decoding and artifact validation for court-ready evidence.
10 weeks · live online
Contact for pricingView outline
AdvancedEnterprise Scale Incident Response and Threat Hunting
Enterprise incident response training covering mass triage across thousands of endpoints, remote collection, data reduction and multi-team response command.
10 weeks · live online
Contact for pricingView outline
AdvancedAdvanced Malware Code Analysis
Advanced malware analysis training in deep static code analysis: unpacking, defeating anti-analysis, and extracting full capability and configuration detail.
12 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.