Does anyone know if there is any good hands-on training for incident response and digital forensics, or certification I need to take in order to gain more hands-on experience? Thanks and any helpful information is appreciated.

  • In the workplace or on your own time?
    – KDEx
    Commented Feb 20, 2016 at 4:40
  • I guess in my own time. SANS is just too expensive -- around $5000 for each course and I am still not sure if the company will pay for me. So are there other choices? Thanks.
    – Yang Yu
    Commented Feb 22, 2016 at 18:57

3 Answers 3


One good place to start is Open Security Training. Despite the site design, they have some quality material there for you to work through.

As you noted, you'll want some hands-on experience as well. Finding challenges online can help with this. You can look at test images (some will be old but still useful!) or, if you're looking more into incident response than digital forensics, the Honeynet Challenges and Malware Traffic Analysis exercises.


On IronGeek (or YouTube, and free):

On SafariBooksOnline Videos (monthly-pay access):

On Udemy (one-time-pay access):

On PluralSight (one-time-pay access or monthly):

On Lynda (through LinkedIn, one-time-pay, or monthly-pay access):


SANS training is excellent: https://www.sans.org/course/advanced-incident-response-threat-hunting-training

Even just taking GCUX which had a 1 day IR training was very impactful.

Free blog : https://digital-forensics.sans.org/blog

Not the answer you're looking for? Browse other questions tagged .