SomTrustCyber Academy
← Career roadmaps

Career Roadmap

Waddada Digital Forensics

Digital Forensics Path

Ururinta caddaynta, disk iyo memory forensics, iyo warbixinno baaritaan ah.

1

1. Beginner

Forensics Foundations

Bilo 0–2

Baro mabaadi'da forensics-ka (Locard's Exchange Principle), xeerarka sharciga ah, order of volatility, iyo evidence collection/chain of custody sax ah (Modules 1–2).

Legal framework & search warrantsOrder of volatilityChain of custodyWrite-blockers & disk imaging
2

2. Junior Forensic Analyst

Disk & Windows Artifacts Analyst

Bilo 2–6

Baro file systems (NTFS/EXT), MFT parsing, deleted file recovery, Windows Registry forensics, Prefetch/Shimcache/Amcache, iyo Event Log deep dive (Modules 3–4).

MFT & timeline analysisRegistry forensics (UserAssist, ShellBags)Prefetch/Shimcache/AmcacheUSB device forensics
  • GCFE
3

3. Forensic Analyst (Specialized)

Memory, Network & Mobile Forensics

Bilo 6–12

Baro memory forensics (Volatility), network forensics (Wireshark, NetFlow), Linux/macOS forensics, iyo mobile device forensics (iOS/Android) (Modules 5–8).

Volatility & memory acquisitionNetwork traffic reconstructionCross-platform forensicsMobile acquisition methods
  • GCFA
4

4. Career Ready & Advanced

DFIR Specialist / Expert Witness

Bilo 12+

Dhammaystir malware analysis/anti-forensics detection (timestomping, steganography, rootkits) iyo forensic reporting/expert witness testimony (Modules 9–10). Kadibna dooro takhasus — malware analysis, ama law enforcement DFIR.

Anti-forensics detectionForensic report writingExpert witness testimony prepCase management
  • Blue Team Level 1
  • EnCE (long-term)

Shahaadooyinka muhiimka ah

GCFE

GIAC Certified Forensic Examiner

Entry

Certification entry-level ah oo forensics-specific ah — diiradda saarta Windows forensics iyo browser/artifact analysis.

Diyaarinta: Module 1–4 + labs

GCFA

GIAC Certified Forensic Analyst

Advanced

Certification heer sare ah oo caan ah, diiradda saarta incident response iyo advanced forensic analysis (memory, network, anti-forensics).

Diyaarinta: Module 1–9 + dhammaan labs-ka

Blue Team Level 1

BTL1

Practical

Imtixaan hands-on ah oo ay ku jirto qayb forensics ah — la wadaago SOC path-ka.

Diyaarinta: Module 2–9 + capstone labs

Digital Forensics Analyst Role

Digital Forensics Analyst / DFIR support position

Career

Yoolka ugu weyn: shaqo DFIR ah oo private sector ama law enforcement ah. Portfolio-ga Module 10 (full end-to-end investigation) wuxuu caddaymaha bixiyaa.

Diyaarinta: Shahaadada SomTrust (10 modules) + full investigation report portfolio

Bilow waddadaada maanta

Isdiiwaangeli koorsada koowaad ee Waddada Digital Forensics.

Fur koorsooyinka