Find the right digital forensics training for where you are and where you want to go. Answer four quick questions and we will match certifications and courses to what employers actually ask for, or browse the full directory of professional courses and university programmes. Ready to apply what you learn? Try our Practice & CTF Directory.
DFIR training at a glance
The finder above covers 238 courses and programmes from 120 providers: 65 professional courses and 173 academic programmes, plus 41 digital forensics and incident response certifications. Inclusion is editorial and free; nothing here is ranked by the provider.
Certifications employers ask for most
Share of 2,008 tracked DFIR job postings (2026-05-30 to 2026-08-31, all countries) that name each certification.
| Certification | Full name (awarding body) | Share of postings |
|---|---|---|
| GCFA | GIAC Certified Forensic Analyst (GIAC) | 4% |
| GCIH | GIAC Certified Incident Handler (GIAC) | 3% |
| GCFE | GIAC Certified Forensic Examiner (GIAC) | 3% |
| GNFA | GIAC Network Forensic Analyst (GIAC) | 2% |
| GREM | GIAC Reverse Engineering Malware (GIAC) | 1% |
| CISSP | Certified Information Systems Security Professional (ISC2) | 1% |
| EnCE | EnCase Certified Examiner (OpenText) | 1% |
| CHFI | Computer Hacking Forensic Investigator (EC-Council) | 1% |
| CFCE | Certified Forensic Computer Examiner (IACIS) | 1% |
| CISM | Certified Information Security Manager (ISACA) | 1% |
Professional training providers listed
13Cubed (3), ADF Solutions (1), Amped Software (2), Antisyphon Training (2), Belkasoft (2), Cellebrite (4), CompTIA (2), Detego Global (1), EC-Council (1), Exterro (2), Hack The Box (1), Hexordia (1), IACIS (2), ISACA (1), ISC2 (1), ISFCE (1), Magnet Forensics (3), MSAB (2), My OSINT Training (1), Nuix (2), NW3C (2), OpenText (1), Oxygen Forensics (3), SANS Institute (17), Security Blue Team (2), TCM Security (3), X-Ways (2).
Academic programmes by country
| Country | Programmes listed |
|---|---|
| Australia | 4 |
| Canada | 17 |
| Germany | 1 |
| India | 6 |
| Indonesia | 2 |
| Ireland | 12 |
| Mexico | 1 |
| Netherlands | 1 |
| New Zealand | 1 |
| Norway | 1 |
| Sweden | 1 |
| United Kingdom | 51 |
| United States | 75 |
Certifications covered
ACE: Exterro ACE Certification (Exterro); AFCE: Amped FIVE Certified Examiner (Amped Software); BelkaCE: Belkasoft Certified Examiner (BelkaCE) (Belkasoft); BTL1: Blue Team Level 1 (Security Blue Team (Centri)); BTL2: Blue Team Level 2 (Security Blue Team (Centri)); CCE: Certified Computer Examiner (ISFCE); CCME: Cellebrite Certified Mobile Examiner (Cellebrite); CCO: Cellebrite Certified Operator (Cellebrite); CCPA: Cellebrite Certified Physical Analyst (Cellebrite); CFCE: Certified Forensic Computer Examiner (IACIS); CHFI: Computer Hacking Forensic Investigator (EC-Council); CISM: Certified Information Security Manager (ISACA); CISSP: Certified Information Systems Security Professional (ISC2); CPIA: CREST Practitioner Intrusion Analyst (CREST); CRIA: CREST Registered Intrusion Analyst (CREST); CySA+: CompTIA Cybersecurity Analyst (CySA+) (CompTIA); DEI-Certified-User: ADF Digital Evidence Investigator Certified User (ADF Solutions); Detego-Ultimate: Detego Ultimate Training Programme credential (City & Guilds Assured) (Detego Global); EnCE: EnCase Certified Examiner (OpenText); GASF: GIAC Advanced Smartphone Forensics (GIAC); GBFA: GIAC Battlefield Forensics and Acquisition (GIAC); GCFA: GIAC Certified Forensic Analyst (GIAC); GCFE: GIAC Certified Forensic Examiner (GIAC); GCFR: GIAC Cloud Forensics Responder (GIAC); GCIH: GIAC Certified Incident Handler (GIAC); GCTI: GIAC Cyber Threat Intelligence (GIAC); GIME: GIAC iOS and macOS Examiner (GIAC); GLIR: GIAC Linux Incident Responder (GIAC); GNFA: GIAC Network Forensic Analyst (GIAC); GOSI: GIAC Open Source Intelligence (GIAC); GREM: GIAC Reverse Engineering Malware (GIAC); GSOA: GIAC Strategic OSINT Analyst (GIAC); HTB CDSA: HTB Certified Defensive Security Analyst (Hack The Box); MCFE: Magnet Certified Forensics Examiner (Magnet Forensics); NWDD-Master: Nuix Workstation Data Discovery Master Certification (Nuix); NWFP-Master: Nuix Workstation Forensic Practitioner Master Certification (Nuix); Oxygen-Certification: Oxygen Forensic Certification (Oxygen Forensics); Security+: CompTIA Security+ (SY0-701) (CompTIA); X-PERT: X-Ways Professional in Evidence Recovery Techniques (X-Ways Software Technology AG); XRY: XRY Certification (MSAB); XRY-Pro: XRY Pro Certification (MSAB).
Data as of 2026-07-17. Use the finder above to filter by role focus, experience, format and country.
More DFIR career tools
- DFIR Salary Explorer: advertised pay by country, role and seniority
- DFIR Skills Demand Explorer: the tools and certifications employers ask for
- DFIR Tool and Vendor Directory: commercial and open-source tools by category
- Practice and CTF Directory: evidence datasets, labs and challenges to build skills on
- Tool Release Tracker: latest releases across the open-source DFIR toolbox
Academic Partners
