This plan is based on what I wish I would have learned before starting in Incident Response. Being that I haven’t been in the field very long, I do keep coming across things I didn’t know that I needed to know, so I will adjust this accordingly.
This plan assumes that you’re a complete beginner to IT.
General IT
Introduction to Computing Fundamentals (Roppers Academy)
Programming/Scripting
Python Essentials 1 and Python Essentials 2 from The Python Institute. (Alternatively, there is a DFIR Python Study Group course on YouTube by Alexis Brignoni that uses the book Head First Python: A Brain-Friendly Guide, 2nd edition. This will be completely free if you are able to borrow the book from a library.)
Intro to Regular Expressions (The Taggart Institute)
JSON Tutorial (TutorialsPoint)
Intro to x86 Assembly Language (YouTube – Davy Wybiral)
PowerShell – Complete PowerShell modules on Microsoft Learn ( starting with Introduction to PowerShell, Discover Commands in PowerShell, Introduction to Scripting in PowerShell)
Networking
Choose One of These Video or Reading Based Courses:
- Reading Based: CS402: Computer Communications and Networks (Saylor Academy) – Has Certificate of Completion
- Video Based: CompTIA N10-009 Network+ Training Course (Professor Messer – YouTube)
Then do one or more of these Hands-On Courses:
- Introductory Networking (Free TryHackMe Room)
- Practical Networking (Roppers Academy)
Cybersecurity
Introduction to Security (Roppers Academy)
Security+ Training Course – (Professor Messer – YouTube)
Free Security+ Practice Questions can be found at Exam Compass and CertPreps
Extra: If you haven’t participated in a CTF before, take Roppers Academy Capture the Flag Bootcamp course.
Go to Part 2: Free Training Plan for New (or aspiring) Incident Responders

