stub priority 22 35 min. 65 XP.

CTF Forensics Toolkit

exiftool, binwalk, steghide, volatility, file carving. Comprehensive version in the NCL April 2026 field guide.

DCWF roles: EN-211 Forensics Analyst CS-212 Cyber Defense Forensics Analyst

Lesson stub

The catalog entry exists so the dependency graph can reference it. Full content is pending. In the meantime, the error-mode pages for the scored services this lesson covers include the same fix playbooks.