The following contains newly released Digital Forensics, Incident Response, Malware Analysis and OSINT training and books from March, as well as upcoming live online training for April. Like the Free & Affordable Training Site, everything in this blog post is under $1,000.

Note: Purchases made through affiliate/partner links and/or using personalized discount codes is one of the things I rely on to be able to keep this website running. I am an affiliate or partner of the following companies mentioned in this post and references to them contain affiliate/partner links: CyberDefenders, Blue Cape Security, TCM Security.

NEWLY RELEASED TRAINING, BOOKS, LABS & CHALLENGES

CYBER 5W

Cyber 5W released a new certification; the C5W Certified Malware Analyst. The $600 price includes training, labs, and the certification exam.

Training Includes:

• Introduction to Malware Analysis
• Static Malware Analysis 101
• Dynamic Malware Analysis 101
• Static Malware Analysis 102 – IDA Pro
• Static Malware Analysis 102 – Ghidra
• Dynamic Malware Analysis 102
• Analyzing Managed Code (readable/uncompiled)
• Extracting IOCs and Writing YARA Rules
• Hands-On Labs

They also released two new hands-on courses that come with certificates of completion:

• Malware Detection & Hunting ($50)
• Analyzing Managed and Scripting Malware ($100)

---

Grzegorz Tworek

Grzegorz Tworek released the Mastering Windows Forensics course.

Early-Bird Price until April 1st:

$299 (course access only)

$799 (Course + Membership Access)

Topics Include:

• Windows Search Artifacts
• NTFS Structures
• Disk Imaging
• Memory Dumps
• Windows Prefetch
• Hardware-Related Artifacts
• The Recycle Bin
• Log Analysis
• Windows Logging
• Internet Browser Artifacts
• SRUM Database
• Identifying Suspicious Files and Settings
• Active Directory and its Database
• Windows Registry Analysis
• User Profile Analysis
• Managing Digital Forensics and Incident Response
• Online and Offline Analysis
• Case Studies and Real-world Scenarios

---

Blue Cape Security

Blue Cape Security released two new free Build Your Lab Tutorials:

• Velociraptor Set Up and Configuration
• Splunk Installation

They also released the new hands-on course Enterprise Security Fundamentals with online labs.

Cost: $299 (It can also be bundled with Practical Windows Forensics with their Hero Bundle for $449)

The course comes with a Certificate of Completion and online lab access.

Topics Include:

• Cyber Threat Landscape
• Enterprise Domain Environments
• Logging, Telemetry, Visibility
• Windows Event Logs
• PowerShell Event Logging and Tuning
• Sysmon Event Logging and Detection
• Initial Access Techniques
• Discovery, Execution and File Transfer with LOLBins
• Domain Reconnaissance
• Credential Attacks
• Lateral Movement Techniques
• Windows Endpoint Compromise
• Persistence Mechanisms
• Privilege Escalation Techniques
• Execution and Defense Evasion
• Data Staging and Exfiltration Techniques
• Network Telemetry and Security
• C2 Beacon Analysis
• Malware Analysis

---

Kase Scenarios

Kase Scenarios released Project Sandshark, a 100% report writing OSINT scenario.

Cost: $125

I had the opportunity to beta test Project Sandshark and earn the badge. This is a great scenario! It also comes with 6 weeks of free access to Forensic OSINT.

---

CyberWarFare Labs

CyberWarFare Labs released Blue Team Fundamentals [BTF] training for $29. It includes a Certificate.

Topics:

• Introduction to Cyber Defense
• Roles & Responsibilities
• Cyber Security Framework
• Introduction to Cyber Operations
• Foundations of Cyber Threat Analysis and Intelligence
• Proactive Cyber Threat Hunting
• Incident Response Strategies and Techniques
• Unveiling the Secrets of Digital Investigations
• Hands-On Labs

---

Dr Josh Stroschein – The Cyber Yeti

Dr Josh Stroschein started Malware Mondays with free hands-on exercises related to a specific malware artifact or data capture.

---

OSINT Techniques

OSINT Techniques: The Ultimate Virtual Machine Book was released by Michael Bazzell.

Cost $20

---

Cyber Detective

Cyber Detective created a new GitHub repository with several cheatsheets. Including:

• Crypto OSINT
• Image OSINT
• Telegram OSINT
• GEOINT
• Reverse Face Search
• Username OSINT
• Netlas CookBook
• Linux for OSINT
• Company Website Info Gathering
• Awesome Hackers Search Engines

---

CSI Linux

CSI Linux released their new training and certification CSI Linux Certified Covert Comms Specialist (CSIL-C3S).

Cost: $385

Topics Include:

• Understanding Covert Communications
• Laws, Ethics, and Human Rights
• Operational Security (OPSEC)
• Traditional Covert Techniques
• Burner Phones
• Sock Puppet Accounts
• Shared Email
• Stenography
• Alternate Data Streams
• Side Channel Communications
• SDRs and Radios
• Encryption
• Network Subterfuge
• VPNs
• SSH
• Darknet and Clandestine Networks

---

Blue Team Labs Online

Blue Team Labs Online released four new labs in March. They are part of the Pro subscription ($19/month to $183/year).

The Labs Include:

• Pyspanda (Reverse Engineering)
• Vault (Security Operations)
• Cozy Bear 2 (Security Operations)
• PHP (Threat Intelligence)

---

LetsDefend

LetsDefend added several free challenges and an Advanced Event Log Analysis course. The course is part of their VIP+ plan ($39.99/month or $359/year).

New Challenges Include:

• macOS Malware
• PDFURI
• Image Stegano

---

CyberDefenders

CyberDefenders released new Free and Pro labs. The Pro account costs $20/month – $200/year. 

New Labs and Challenges:

• RetailBreach: Network Forensics (Pro)
• AsyncRAT: Malware Analysis (Pro)
• Web Investigation: Network Forensics (Free)
• Malicious PyPi: Endpoint Forensics (Pro)
• UnPackME: Malware Analysis (Free)

They also added VBA Macro Analysis with a hands-on lab to their Certified CyberDefender (CCD) Certification and Training.

---

TryHackMe

TryHackMe released free DFIR challenges and walkthroughs:

• Chrome
• Linux File System Analysis
• Legal Considerations in DFIR

---

Sofia Santos

Sofia Santos released OSINT Exercise 025. All of Sofia’s OSINT exercises are free.

---

Ace Responder

Ace Responder released Investigating Entra ID Attacks. This is part of their $17.49/month Analyst subscription.

UPCOMING ONLINE TRAINING & CTFS

Hexordia

---

Hacktoria

---

My OSINT Training

---

Belkasoft

---

Antisyphon Training

---

Active Countermeasures

---

Trace Labs

---

The OSINTion

---

Antisyphon Training

---

ADDITIONS TO THE TRAINING SITE

The following was added to the Free & Affordable Training Site this month:

• Hands-On KQL Courses (Blu Raven)
• Malware Analyst Professional – Level 1 (TrainSec)
• Practical Junior OSINT Researcher (PJOR) (TCM Security)
• Mastering Windows Forensics (Grzegorz Tworek)

TRAINING TUESDAY HIGHLIGHTS

This year, I started doing Training Tuesday Highlights on LinkedIn, Twitter (X), and Facebook using the hashtag #DFIRDivaTTH. Every Tuesday I highlight a training provider, instructor, book, or course listed on the Free & Affordable Training Site related to Digital Forensics, Incident Response, Malware Analysis, or OSINT.

March Highlights:

• March 5th: My OSINT Training
• March 12th: Pluralsight
• March 19th: Hack The Box
• March 26th: Linux LEO

CURRENT DISCOUNTS

• Get 20% off Cyber 5W courses until April 10th using code: c5w3koff
• Get 50% off Cyber 5W’s Ransomware Analysis 101 course until April 30th using code: ransom50off
• Get 30% off TryHackMe Annual Subscriptions until April 2nd using code: CYBEREASTER
• Get 30% off Blu Raven’s Hands-On Kusto Query Language (KQL) for Security Analysts course until April 2nd using code: EASTER24