Where to start
Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.- TryHackMe — Advent of Cyber 2022 (Easy · ~1440 min) · 🇬🇧
- TryHackMe — Advent of Cyber 2023 (Easy · ~1440 min) · 🇬🇧
- TryHackMe — Android Analysis (Easy · ~60 min) · 🇬🇧
- TryHackMe — DFIR: An Introduction (Easy · ~90 min) · 🇬🇧
- TryHackMe — Digital Forensics Fundamentals (Easy · ~60 min) · 🇬🇧
- TryHackMe — Ice (Easy · ~45 min) · 🇬🇧
Curated resources
HTB machines practicing USB forensics (1)
TryHackMe rooms practicing USB forensics (39)
← Back to the full glossary Last updated: 2026-08-17