Affordable Training Categories

Affordable Digital Forensics Training

Posted on December 3, 2020 by DFIR Diva Digital Forensics

For the purpose of this site, “affordable” is under $1,000

I will try to keep up with price changes, however, the prices listed here may not always be accurate.

Name & Direct Link	Platform/Instructor	Price in US Dollars	Price Frequency	Topics
Digital Forensics: Foundations Path	Pluralsight - Various Instructors	29	Monthly (There are also $299 and $449 yearly options)	Digital Forensics Analyst Role based on NIST NICE, Digital Media Acquisition, Enumerating Computer Systems, Threats, Attacks, Vulnerabilities, Investigating Encrypted Systems, Legal and Ethical Considerations
Setting up a Forensic Workstation	Pluralsight - Robert McMillen	29	Monthly (There are also $299 and $449 yearly options)	Virtual Machines, Checkpoints, Sandboxing, Gathering Forensic Data for Legal Inquiry, Installing Forensic Applications, FTK Imager, Autopsy, Backups and Redundancy
USB Forensics	Pluralsight - Philip Polstra	29	Monthly (There are also $299 and $449 yearly options)	USB Forensics, Writeblocking and Impersonation, Duplication
iOS Social Media Forensics	eForensics Magazine - Kinga Kięczkowska	249	One Time (Can also get all courses for $890/year)	iPhone Analysis, Facebook, Facebook Messenger, WhatsApp, Instagram, Python Scripting, SQL Queries,
Digital Forensic Imaging	eForensics Magazine - David Tatum	249	One Time (Can also get all courses for $890/year)	Forensic Imaging, Hashing, Extraction, Examining Unallocated and Slack Space, Imaging HDDs and SDDs, Creating RAID Images, Memory Images, SaaS-based Images, Imaging Virtua Hard Drives in a VM, Enterprise-Wide Triage Imaging
Android Mobile Forensics	eForensics Magazine - Divya Lakshmanan	249	One Time (Can also get all courses for $890/year)	Android Incident Response, Unrooted & Rooted Device Analysis, Static Android Malware Analysis, Dynamic Android Malware Analysis, SIM Card Analysis, Encrypted Devices
Drone Forensics	eForensics Magazine - Alan Roder	249	One Time (Can also get all courses for $890/year)	UAVs, UAS, UAV Components, UAV Related Criminal Activities, Initial Response, Preservation, Audits and Logs, Seizure
Digital Video Forensics	eForensics Magazine - Raahat D Singh	249	One Time (Can also get all courses for $890/year)	Digital Video Concepts, Technical Issues Related to Video Recordings, Categories of Digital Videos, Videos as Forensic Evidence, Admissibility of Video Evidence, Forensic Video Analysis
Recovering Virtual Machines From Lost VMFS Partitions	eForensics Magazine - Washington Almeida	79	One Time (Can also get all courses for $890/year)	Virtual Machines (VMs), RAW Images, dcfldd, losetup, vmsf-tools, How to Identify and Manage VMFS Partitions
Project Ares	Circadence	90	Per Month (There is also a $900/Annual Option)	This is a hands-on gamified learning platform that covers several areas including Forensics, Linux, and Scripting.
An Introduction to Digital Forensics	Security Blue Team	26.71	One Time	Chain of Custody, Types of Evidence, File Carving, Linux Command Line, Stenography, Cracking ZIP Files
Everyday Digital Forensics	Cybrary	49.50	Per Month for all courses - There is also a $299 per year option	Digital Forensics Investigation, Investigation Process, Data Acquisition, Evidence Logs, File Systems, Mobile Forensics, Image Analysis
Autopsy Basics and Hands-On	Basis Technology - Brian Carrier	495	One Time	Autopsy Installation, Cases and Data Sources, UI Basics, Hash Lookup, Modules, Keyword Search, Correlation Engine, Android Analyzer, Timeline Interface, Image Gallery, Tagging, Commenting & Reporting
Introduction to FTK Imager - On Demand	AccessData	100	One Time	FTK Imager Features and Processes, Creating a Forensic Image, Viewing Evidence, Triage Process
Introduction to Password Recovery Toolkit - On Demand	AccessData	100	One Time	Features and Processes of Password Recovery Toolkit, Creating Dictionaries, Word List Creation
Introduction to Forensic Toolkit - On Demand	AccessData	500	One Time	Forensic Toolkit Administration and Setup, Interface, Filtering and Searching, Known File Filter, Exporting and Reporting
New Technology File System (NTFS) Forensics	eForensics Magazine - Divya Lakshmanan	229	One Time (Can also get all courses for $890/year)	Processing System Files, Processing User Files, Features of NTFS, Sleuth Kit, Alternate Data Streams
Fourth Extended File System (EXT4) Forensics	eForensics Magazine - Divya Lakshmanan	219	One Time (Can also get all courses for $890/year)	Understanding EXT4, Locating Files and Directories, Forensically Interpreting EXT4 File System Features, Encryption
MDFIR - Certified DFIR Specialist	Mosse Cyber Security Institute	450	One Time	File Analysis, Windows Forensics, Memory Forensics, Applications Forensics, Network Forensics, Malware Analysis, Enterprise Investigations, Threat Intelligence, Writing Digital Forensics and Incident Reports
Digital Forensics Fundamentals	Paraben Corporation Training Academy	995	One Time	Evidence Collection, Chain of Custody, Foundational Details of the Field of Digital Forensics. This course includes certification as a Certified Computer Examiner once the course and test are completed.
Linux Forensics	CodeRed	24.99	Per Month - There is also a $249/year option. Both options include access to all CodeRed courses.	Linux History, Architecture, File System Overview, File Permissions, Editing File Properties, Root, Sudo, System Initialization, Emergency Alternative Start-Up Options, Shutting Down the System. Processes
INE - Digital Forensics	INE - Ali Hadi	49	Monthly (There is also a $499 and $749/year option)	Digital Forensics, Logs, Timelines, Reporting, System & Network Forensics, Acquisition, File & Disk Analysis

Affordable Incident Response Training

Posted on December 3, 2020 by DFIR Diva Incident Response

For the purpose of this site, “affordable” is under $1,000

I will try to keep up with price changes, however, the prices listed here may not always be accurate.

Name & Direct Link	Platform/Instructor	Price in US Dollars	Price Frequency	Topics
Hands-On Incident Response Fundamentals	Pluralsight - Ryan Chapman	29	Monthly (There are also $299 and $449 yearly options)	Defining Incident Response, Common Incident Response Tasks, Analyzing Files, Base64, Threat Intelligence, IOCs
Operationalizing Cyber Threat Intel: Pivoting & Hunting	Pluralsight - Ryan Chapman	29	Monthly (There are also $299 and $449 yearly options)	Cyber Threat Intelligence (CTI), IOC Extraction, IOC Pivoting, IOC Hunting, Intel Management
Security Event Triage Path	Pluralsight - Various Instructors	29	Monthly (There are also $299 and $449 yearly options)	Analyzing Network, Application, Machine & Endpoint Data, TTPS, KSAs, Tools, Detecting Malicious Traffic, Monitoring Assets and Topology, Detecting Anomalies, Statistical Baselining with SIEM Data
Streamlining Your Incident Response Process with Splunk	Pluralsight - Aaron Rosenmund and Ryan Chapman	29	Monthly (There are also $299 and $449 yearly options)	Introduction to Splunk, Log Data, Aggregation, Splunk Resources, Using Splunk. Note: In addition to this one, there are a lot of Splunk courses on Pluralsight including certification paths.
Investigation Theory	Applied Network Defense - Chris Sanders	647	One Time	Mental Models for Approaching an Investigation, Interpreting Evidence, Asking Investigative Questions, Open Source Intel, Strategies for Tracking the Investigation Process, Finding Leads Without Alerts, Recognizing Negative Bias, Reporting
ELK for Security Analysis	Applied Network Defense - Chris Sanders	497	One Time	Elasticsearch, Logstash, Kibana, Beats, JSON, Collecting and Manipulating Structured and Unstructured Data, Searching Data, Building Dashboards, Building Data Pipelines, Logs, Netflow, IDS Alerts, CSV Files
Building Virtual Labs	Applied Network Defense - Tony Robinson	197	One Time	This is a choose your own adventure style course where you can chose to build a lab with Snort, Suricata, or Splunk. IDS/IPS, SIEM, Log Aggregation.
Practical Threat Hunting	Applied Network Defense - Chris Sanders	647	One Time	Hunting Frameworks, MITRE ATT&CK, Common Types of Anomalies, Effective Note Taking, ELK, Hands-On Threat Hunting Labs
Practical Packet Analysis	Applied Network Defense - Chris Sanders	797	One Time	How Networking Works at the Packet Level, Interpreting Packet Data, Wireshark, Filters, Network Protocols, Application Layer Protocols, Packet Carving Techniques, How Malware Communicates on the Network
Osquery for Security Analysis	Applied Network Defense - Josh Brower	397	One Time	Crafting SQL Queries, Interrogating Processes to Determine if They're Malicious, Uncovering Persistence and Lateral Movement, MITRE ATT&CK, Kolide, ELK Stack, Generating Alerts
Intrusion Detection with Suricata	Applied Network Defense - Open Information Security Foundation	497	One Time	Installing and Configuring Suricata, Techniques for Capturing Network Data, Rules, EveBox, JQ, Alerts
Demystifying Regular Expressions	Applied Network Defense - Darrel Rendell	197	One Time	How to Apply Regex, Building and Testing Regular Expressions, Writing Host-Based Detection with YARA, Grep, Snort Rules, Matching Host Logs in SIEMs
Project Ares	Circadence	90	Per Month (There is also a $900/Annual Option)	This is a Hands-On gamified learning platform with paths that include Cyber Defense Analyst. There are also battle rooms that include forensics, Linux, and scripting as well as games to learn about protocols, Regex, and the Cyber Kill Chain.
LetsDefend	LetsDefend	15	Per Month	This is a SOC Simulation Environment including alerts, case management, log search, endpoint security and threat intelligence. Save 15% off right now using code DFND15. Proceeds using that code go to the Innocent Lives Foundation.
Mastering Wireshark (Video)	Packt	9.99	Per Month (For everything on Packt) There is also a one time $124.99 purchase option for this course.	Network Forensics, Wireshark Customization, Capturing and Examining Traffic, Analyzing Network Protocols, Analyzing Application Protocols, Command Line Tools, Expanding & Troubleshooting Wireshark
An Introduction to Network Analysis	Security Blue Team	26.71	One Time	Networking 101, Wireshark, TCPDump, PCAP Analysis
Introduction to Threat Hunting	Security Blue Team	26.71	One Time	Threat Hunting Explained, IOCs, Hunting for Malware, Hashing, Mandiant Redline, File Properties
Blue Team Level 1 (Training and Certification)	Security Blue Team	601.07	One Time (The price includes training and two BTL1 certification exam attempts)	Security Fundamentals, Phishing Analysis, Threat Intelligence, Digital Forensics, Incident Response, SIEM
Hands-On Incident Response Analysis	Packt - Suni Gupta	9.99	Per Month (For everything on Packt) There is also a $124.99 one time purchase option for the course.	Incident Response Strategy Formulation, Communication, Containment, Documentation, Forensics and Eradication. Detecting and Preventing Attacks, Handling Malicious Code, Insider Threats
Introduction to Malware Analysis for Incident Responders	Packt - Jason Dion	9.99	Per Month (For everything on Packt) There is also a $188.99 one time purchase option for the course.	Symptoms and Activities, Types of Malware, Infection Vectors, Malware Analysis, FlareVM,
Incident Handler Career Path	Cybrary	49.50	Per Month - There is also a $299 per year option	Incident Response Steps, Incident Response Planning, Implementing an Incident Response, Log Correlation & Analysis, Recovery, Chain of Custody, Documentation, Legal Concerns
SOC Analyst 1, 2, and 3 Career Paths	Cybrary	49.50	Per Month - There is also a $299 per year option	Threat Intelligence, Log Analysis, Wireshark, Cryptography, Attack Mitigation, Splunk, SIEM, Incident Response, Digital Forensics, Intrusion Detection, Reverse Engineering
The Complete Splunk Beginner Course	Udemy - Adam Frisbee	11.99	One Time (Prices on udemy change but they have sales often)	Setting up a Splunk environment, Creating Reports and Dashboards, Understanding SPL (Search Processing Language), Building datasets and data models.
MDFIR - Certified DFIR Specialist	Mosse Cybersecurity Institute	450	One Time	File Analysis, Windows Forensics, Memory Forensics, Applications Forensics, Network Forensics, Malware Analysis, Enterprise Investigations, Threat Intelligence, Writing Digital Forensics and Incident Reports
MBT - Certified Blue Teamer	Mosse Cyber Security Institute	450	One Time	Deploy and Manage Incident Mitigation Strategies and Tools, Investigate and Contain Security Intrusions on Windows Systems, Analyze Suspicious Binaries and Malware Samples, Identify Unknown Attacks, Produce Threat Intelligence, Write Custom Tools
MTH - Certified Threat Hunter	Mosse Cyber Security Institute	450	One Time	Capturing Logs in Large-Scale Computer Networks, Using Python to Hunt for IOCs, Using YARA to Hunt for Malicious Binaries at Scale, Perform Deep-Dive Digital Forensics Investigations and Write Rapid Incident Response Reports
Blue Team Boot Camp: Defending Against Hackers	CodeRed	24.99	Per Month - There is also a $249 per year option. Both options include access to all courses on CodeRed.	Risk Analysis, Threat Intelligence, Cyber Kill Chain, Endpoint Security, EDR, Windows Hardening, OSQuery, PowerShell, WMI, Linux Hardening, ClamAV, Chkrootkit, HIDS in Linux, MITRE ATT&CK, Network Security, Firewalls, VLAN, Proxy Servers, Log Aggregation & Correlation, Windows Logs, Linux Logs
SOC Analyst Prep Workshop	Cover6 Solutions - Tyrone Wilson	199	One Time	Threat Management, Vulnerability Management, Cyber Incident Response, Security Architecture and Tool Sets. This is a live, virtual workshop. Dates vary.
CompTIA CySA+ Training	Dion Training	399	One Time	CySA+ Training, Practice Exams, and Hands-On Labs.
Cyber Defense Path	TryHackMe	10	Per Month	Security Operations and Monitoring, Threat Emulation, Incident Response, Forensics, Malware Analysis and Reverse Engineering
CyberChef for Security Analysts	Applied Network Defense	397	One Time	CyberChef, Character Encoding and Encryption, Data Formatting and Parsing, Defeating Malware Obfuscation, Log File and Forensic Analysis Techniques, Image Manipulation, HTTP Requests, JSON Data
INE - Incident Handling & Response	INE - Dimitrios Bougioukas	49	Monthly (There is also a $499 and $749/year option)	Incident Handling & Response Overview, Network Traffic & Flow Analysis, Practical Incident Handling, SOC 3.0 Operations & Analytics

Affordable OSINT Training

Posted on December 3, 2020 by DFIR Diva OSINT

For the purpose of this site, “affordable” is under $1,000.

I will try to keep up with price changes, however, the prices listed here may not always be accurate.

Name & Direct Link	Platform/Instructor	Price in US Dollars	Price Frequency	Topics
Open Source Intelligence (OSINT) Fundamentals	TCM Security - Heath Adams	29.99	One Time	OSINT Overview, Notekeeping, Sock Puppet Accounts, Search Engines, Email Addresses, Breached Data, Phone Number, Username, Website, Social Media, Wireless Network OSINT, Tools, Automation, Report Writing
Using the Internet as an Investigative Research Tool	Toddington	499.99	One Time	Advanced Search Features, OSINT Principles and Processes, Avoiding Detection, Piecing User-Generated Content Together, Social Media, Maltego,
Social Media Intelligence & Investigation	Toddington	299.99	One Time	SOCMINT, Search Techniques, Documentation Tools and Practices, Investigating Images, Sock Accounts, Facebook, Twitter, Instagram, YouTube, Online Forums, Groups, Blogs, Geolocation, Monitoring Users and Locations, Privacy Considerations and Techniques
Trace Labs OSINT Foundations Course	OSINT Combine - Chris Poulter	99	Every 6 Months	Analysis Techniques, Collection Sources, Collection Approach & Reporting Methods, Advanced Google Searching, People Search Engines, Username Correlation, Reverse Image Searching
OSINT Fundamentals + Social Media Course	OSINT Combine - Chris Poulter	799	Per Year	Analysis Techniques, OSINT Platform, Collection Approach & Reporting Methods, Advanced Google Searching, People Search Engines, Username Correlation, Reverse Image Searching, Person of Interest Collection on Various Social Media Platforms, Social Network Analysis
OSINT Area & Event Awareness Course	OSINT Combine - Chris Poulter	499	Per Year	Social Media Monitoring, CCTV Monitoring, Advanced Mapping, Region Assessments, Threat Actors, Event Monitoring
OSINT Base Camp	OSINT-i1 - Andrew Fodred	275	One Time	OSINT Background and Process, OPSEC, Advanced Search Techniques, Username Investigation, Reverse Image Searching, Maps & Satellite Images, Email, Phone Numbers, Social Media, Tools
IntelTechniques	IntelTechniques	450	Per Year	Case Notes, Video/Screen Capture & Preservation, Search Sites & Tools, Names, Email. Usernames, Phone Numbers, Social Media Investigations, Photos & Video, Documents, Maps, Vehicles, Corporations, Groups, Events, Domains, IPs, VMs, Darknet, Command Line & Scripts
Shodan, OSINT & IoT Devices	eForensics Magazine - Maciej Makowski	39	One Time (Can also get all courses for $890/year)	Searching on Shodan, GUI & CLI, Identify Vulnerable IoT Devices, Search for ICS Devices, Hide Your Devices From Shodan Searches, VPN and Proxy Impact on Shodan
Introduction to Open-Source Intelligence	Security Blue Team	26.71	One Time	OSINT Framework, The Harvester, TweetDeck, Reverse Image Searching, Google Dorks
Introduction to Darkweb Operations	Security Blue Team	26.71	One Time	Dark Web, Clear Web, Deep Web, Tor, Search Engines
OSINT Training Essentials (Online)	ShadowDragon	250	Per Year (There are also other options.)	OSINT Collection & Analysis, Manual & Automated Intelligence Collection Methods
Hetherington Group Webinars	Hetherington Group	69	One Time (Prices ranged from $69 - $414)	The Hetherington Group has Webinars with Topics Such as: Dark Web Investigations, Online Search Engines, Social Media, Public Records, Ethical Investigations
Introduction to People OSINT/Missing People OSINT	The OSINTion - Joe Gray	175	One Time	OSINT Fundamentals, People OSINT Tools and Resources, Social Media, EXIF, Reverse Image Search, Collaboration Strategies, Mini-CTF to Apply the Concepts
Alternative and Advanced Search Engine OSINT	The OSINTion - Joe Gray	125	One Time	Google Dorking/Advanced Operators, Other Search Engines, Techniques for Searching Abroad
OCR and Image/Video Analysis	The OSINTion - Joe Gray	125	One Time	Reverse Image Search, EXIF Analysis, Optical Character Recognition (OCR)
Business OSINT	The OSINTion - Joe Gray	175	One Time	OSINT Fundamentals, Legal and Ethical Considerations, DNS, Social Media, Public Filings, Search Engines, OSINT Tools
Practical OPSEC for OSINT and Privacy	The OSINTion - Joe Gray	150	One Time	OSINT and OPSEC Relationship, Social Media and Internet Presence, Secure Technologies, Proactive use of Disinformation and Deception for OPSEC, Steps to Take to Enhance One's OPSEC
OSINT Udemy Courses	Udemy	10.99	One Time (Prices Vary)	Udemy has several courses with topics such as: OSINT, Dark Web, Social Media Intelligence. Just search for "OSINT".
Open Source Intelligence (OSINT) Fundamentals	Cybrary	49.50	Per Month - There is also a $299 per year option	OSINT Theory, Notes, Sock Puppets, Tools and Techniques, OPSEC
Open Source Intelligence for Forensics	eForensics Magazine - Joshua Richards	249	One Time (Can also get all courses for $890/year)	Using Identifiers, Social Media Profiles, Public Records, Tools & Extensions
OSINT - Open Source Intelligence	CodeRed	24.99	Per Month - There is also a $249/year option. Both options include all courses on CodeRed.	Note Taking, Google, Reverse Searches, Darkweb, People Search, Data Breaches, Maltego, Building an OSINT Machine, Social Media
OSINT Investigation Tactics	CyberSec Guidance	50	One Time	OSINT Approaches, Note Keeping, OSINT Tools, Writing OSINT Investigation Reports, Real World OSINT Investigation Simulation

Affordable Malware Analysis & Reverse Engineering Training

Posted on December 3, 2020 by DFIR Diva Malware Analysis & Reverse Engineering

For the purpose of this site, “affordable” is under $1,000.

I will try to keep up with price changes, however, the prices listed here may not always be accurate.

Name & Direct Link	Platform/Instructor	Price in US Dollars	Price Frequency	Topics
Getting Started with Reverse Engineering	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	Assembly Basics, Native Code, Reverse Engineering, Debuggers
Analyzing Malware for .NET and Java Binaries	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	.NET Binaries, Java Binaries
Reverse Engineering Malware with Ghidra	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	Ghidra, Reverse Engineering, Malware, Obfuscation, Packing, Ghidra Scripts
Defeating Anti-Reverse Engineering and Anti-Debugging Techniques	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	Defeating Anti-Reverse Engineering Techniques, Stopping Anti-Debugging Techniques, Sandboxing
Malware Analysis: Identifying and Defeating Code Obfuscation	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	Code Obfuscation, VBA Obfuscation, PowerShell Obfuscation, String Obfuscation, Cryptography in Malware
Malware Analysis: Identifying and Defeating Packing	Pluralsight - Josh Stroschein	29	Monthly (There are also $299 and $449 yearly options)	Common Packing Scenarios, How Packers Work, Identifying Custom Packers, Performing Manual Unpacking
Setting Up a Malware Analysis Lab	Pluralsight - Aaron Rosenmund & Tyler Hudak	29	Monthly (There are also $299 and $449 yearly options)	Creating a Safe Environment, Choosing Operating Systems, Evading Intelligent Malware, Choosing Hardware to Use, Virtual Machines, Tools
Fileless Malware	Pluralsight - Aaron Rosenmund and Tyler Hudak	29	Monthly (There are also $299 and $449 yearly options)	How Fileless Malware Works, Defenses Against Fileless Malware, Logging, Hunting Tools
Performing Malware Analysis on Malicious Documents	Pluralsight - Tyler Hudak	29	Monthly (There are also $299 and $449 yearly options)	Lab Setup, Malicious Document Analysis, PDF Analysis, JavaScript Analysis, VBA Script Analysis
Malware Analysis Fundamentals	Pluralsight - Tyler Hudak	29	Monthly (There are also $299 and $449 yearly options)	Lab Setup, Static Analysis, Dynamic Analysis, Understanding the PE Header
TrickBot Banking Trojan	Pluralsight - Aaron Rosenmund and Tyler Hudak	29	Monthly (There are also $299 and $449 yearly options)	What TrickBot Does, TrickBot Analysis in the Lab, Detecting TrickBot Indicators on Your Network
Zero 2 Automated	Zero2Automated	200.07	One Time	Encryption, Hashing, Compression, Unpacking, Maldocs, Loaders, Persistence, Process Injection, Uncompiled Malware, Exploits, Rootkits, Bootkits, Shellcode, Threat Intelligence, TrickBot, YARA Signature Development
A Crash Course in Deep Dive Malware Analysis (On-Demand)	AGDC Services	200	One Time	Advanced Malware Analysis, IOCs, Decision Making Process, How to Identify Key Focus Areas, Building a C2 Server for Dynamic Analysis, Ghidra, x64Dbg, REMNux
MRE - Certified Reverse Engineer	Mosse Cyber Security Institute	450	One Time	Binary Classification, Behavioral Analysis, Memory Forensics, Static Analysis, Dynamic Analysis, Basic Code Deobfuscation Techniques, Analyze Ransomware, RATs, and APTs.
INE - Malware Analysis	INE - Ali Hadi	49	Monthly (There is also a $499 and $749/year option)	Malware Analysis, Static Analysis, Assembly, Behavior Analysis, Debugging, Disassembly, Obfuscation Techniques
INE - Reverse Engineering	INE - Kyriakos Economou	49	Monthly (There is also a $499 and $749/year option)	Practical Reverse Engineering, Reverse Engineering Foundations