USB forensics

Cross-platform resources for USB forensics: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

USB forensics

This page aggregates cross-platform resources to practice USB forensics: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/forensics/basic-forensic-methodology/index.html

HTB machines practicing USB forensics (1)

Machine	OS	Difficulty
Mirai	Linux	EASY

TryHackMe rooms practicing USB forensics (39)

Room	Difficulty	Type	Access	Official
Advent of Cyber 2022	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 2023	EASY	Walkthrough	🟢 Free	Open
Android Analysis	EASY	Walkthrough	🔵 VIP	Open
DFIR: An Introduction	EASY	Walkthrough	🟢 Free	Open
Digital Forensics Fundamentals	EASY	Walkthrough	🔵 VIP	Open
Ice	EASY	Walkthrough	🟢 Free	Open
Intro to Cold System Forensics	EASY	Walkthrough	🟢 Free	Open
Intro to Digital Forensics	EASY	Walkthrough	🟢 Free	Open
iOS Forensics	EASY	Walkthrough	🔵 VIP	Open
macOS Forensics: The Basics	EASY	Walkthrough	🟢 Free	Open
MAL: REMnux - The Redux	EASY	Walkthrough	🔵 VIP	Open
Malware Analysis - Malhare.exe	EASY	Walkthrough	🟢 Free	Open
Memory Analysis Introduction	EASY	Walkthrough	🟢 Free	Open
Memory Forensics	EASY	Challenge	🟢 Free	Open
NetworkMiner	EASY	Walkthrough	🔵 VIP	Open
Yara	EASY	Walkthrough	🔵 VIP	Open
AI Forensics	MEDIUM	Walkthrough	🟢 Free	Open
Forensics - Registry Furensics	MEDIUM	Walkthrough	🟢 Free	Open
IR Timeline Analysis	MEDIUM	Walkthrough	🟢 Free	Open
KAPE	MEDIUM	Walkthrough	🟢 Free	Open
Legal Considerations in DFIR	MEDIUM	Walkthrough	🟢 Free	Open
Linux Forensics	MEDIUM	Walkthrough	🔵 VIP	Open
Linux Live Analysis	MEDIUM	Walkthrough	🔵 VIP	Open
Linux Server Forensics	MEDIUM	Walkthrough	🟢 Free	Open
Secret Recipe	MEDIUM	Walkthrough	🔵 VIP	Open
Security Footage	MEDIUM	Challenge	🟢 Free	Open
Session Forensics	MEDIUM	Walkthrough	🟢 Free	Open
Volatility Essentials	MEDIUM	Walkthrough	🟢 Free	Open
Web Attack Forensics - Drone Alone	MEDIUM	Walkthrough	🟢 Free	Open
Windows Applications Forensics	MEDIUM	Walkthrough	🔵 VIP	Open
Windows Forensics 1	MEDIUM	Walkthrough	🟢 Free	Open
Windows Forensics 2	MEDIUM	Walkthrough	🔵 VIP	Open
Windows User Account Forensics	MEDIUM	Walkthrough	🔵 VIP	Open
Windows User Activity Analysis	MEDIUM	Walkthrough	🔵 VIP	Open
XDR: Defense Evasion	MEDIUM	Walkthrough	🔵 VIP	Open
Forensics	HARD	Challenge	🟢 Free	Open
Lost in RAMslation	HARD	Challenge	🔵 VIP	Open
macOS Forensics: Applications	HARD	Walkthrough	🔵 VIP	Open
macOS Forensics: Artefacts	HARD	Walkthrough	🟢 Free	Open

---

← Back to the full glossary

Last updated: 2026-05-09