Understand the evidence. Build better investigations.

Digital investigations require more than knowing which tool to run. They depend on understanding where evidence comes from, how it can change, and what it can reliably tell you.

eForensics explores computer and mobile forensics, memory and file-system analysis, cloud investigations, malware analysis, OSINT, and incident response. Our publications and courses connect technical methods with the questions investigators face.

Our content is for digital forensic practitioners, incident responders, security analysts, researchers, and students developing their investigative skills.

Topics range from foundational methods to specialist analysis. Check the prerequisites on each course page to find material that matches your experience.

Open and Free publications are available without paid membership. Premium publications require membership, including those that also carry an Open or Free category.

Membership also provides access to the published course catalog and paid Library material. Your account shows the access associated with your membership.

Use forensic techniques within the authority and scope of your investigation. Preserve original evidence, document your methods, and validate findings before drawing conclusions.

Tools and techniques evolve. Consider the environment, software version, and limitations of a method when applying what you learn.