Skip to content
  • Train & Certify
      • OCPT | Professional Penetration Tester

      • OCFI | Digital Forensic Investigator

      • OCAUTO | Automotive Systems Architect

      • All Certifications

  • Students
      • REVERSE ENGINEERING | TTP SYSTEM ENTRY

      • DFIR | FORENSIC INVESTIGATIVE MINDSET

      • CTF | CAPTURE THE FLAG OPERATIONS

      • CERTIFICATIONS | ALL ACTIVE PROGRAMS

      • HACKATHON NEWS

  • Courses
  • Library
  • Labs
Login
  • Train & Certify
  • Students
  • Courses
  • Library
  • Labs
  • Train & Certify
  • Students
  • Courses
  • Library
  • Labs
Login
Get Started
  • December 18, 2025
  • Digital Forensics, TTP

p5.4_final_report.pdf // Writing the Final Forensic Report

  • December 18, 2025
  • Digital Forensics, TTP

p5.3_anti_forensics.wipe // Identifying When a Suspect Tried to Wipe Their Tracks

  • December 18, 2025
  • Digital Forensics, TTP

p5.2_super_timeline.log // Creating the “Super Timeline” (log2timeline)

  • December 18, 2025
  • Digital Forensics, TTP

p5.1_file_carving.hex // Recovering Images and Docs by their “Magic Bytes”

  • December 18, 2025
  • Digital Forensics, TTP

p4.4_recycle_bin.bin // Recovering the “Intended” Deletions

  • December 18, 2025
  • Digital Forensics, TTP

p4.3_cloud_remnants.log // What stays on the disk when you use OneDrive/Dropbox

  • December 18, 2025
  • Digital Forensics, TTP

p4.2_email_headers.forensic // Tracking the Source of a Phishing Attack

  • December 18, 2025
  • Digital Forensics, TTP

p3.5_usb_artifacts.sys // Removable Media Forensics

  • December 18, 2025
  • Digital Forensics, TTP

p4.1_browser_incognito.db // Browser Forensics: Chrome, Firefox and others

  • December 18, 2025
  • Digital Forensics, TTP

p3.4_lnk_jumplists.trk // LNK Files & Jump Lists

  • December 18, 2025
  • Digital Forensics, TTP

p5.4_final_report.pdf // Writing the Final Forensic Report

  • December 18, 2025
  • Digital Forensics, TTP

p5.3_anti_forensics.wipe // Identifying When a Suspect Tried to Wipe Their Tracks

  • December 18, 2025
  • Digital Forensics, TTP

p5.2_super_timeline.log // Creating the “Super Timeline” (log2timeline)

  • December 18, 2025
  • Digital Forensics, TTP

p5.1_file_carving.hex // Recovering Images and Docs by their “Magic Bytes”

  • December 18, 2025
  • Digital Forensics, TTP

p4.4_recycle_bin.bin // Recovering the “Intended” Deletions

  • December 18, 2025
  • Digital Forensics, TTP

p4.3_cloud_remnants.log // What stays on the disk when you use OneDrive/Dropbox

  • December 18, 2025
  • Digital Forensics, TTP

p4.2_email_headers.forensic // Tracking the Source of a Phishing Attack

  • December 18, 2025
  • Digital Forensics, TTP

p3.5_usb_artifacts.sys // Removable Media Forensics

  • December 18, 2025
  • Digital Forensics, TTP

p4.1_browser_incognito.db // Browser Forensics: Chrome, Firefox and others

  • December 18, 2025
  • Digital Forensics, TTP

p3.4_lnk_jumplists.trk // LNK Files & Jump Lists

Load More

Discard the noise of entry-level theory. We build labs that actually break things, taught by operators who have lived in the trenches. Ocsaly is defined by zero-day logic, forensic precision, and tradecraft that survives a real-world engagement.

  • [email protected]

Certifications

  • OCSYS | Systems Operator Specialist
  • OCAUTO | Automotive Systems Architect
  • OCPT | Professional Penetration Tester
  • OCMA | Certified Malware Analyst
  • OCFI | Digital Forensic Investigator
  • All Certifications ->

> Tactics.
> Techniques.
> Procedures.

  • Digital Forensics Interactive Learning
  • Reverse Engineering Interactive Learning
  • Wireless Hacking Interactive Learning
  • Cyber Security Interactive Learning
  • All TPP Trainings ->

Legal

  • Verify Certificate
  • Terms & Conditions
  • Privacy Policy
  • Disclaimer


Register Lost your password?