Module exam

Forensics & DFIR practical exam

This is a hands-on exam. Each task hands you a piece of evidence: a log line, an encoded command, a hex dump, a registry write. Work it the way an analyst would, with the notes and a free tool like CyberChef. Get seven of ten to earn the certificate.