Login

🎯 Learn threat hunting fundamentals with Architecting the Hunt.

Learn more

❯ Find the evidence. Understand what happened.

Build practical digital forensics and threat hunting skills with 13Cubed. Learn from experienced investigators through clear explanations, detailed demonstrations, and hands-on practice. From Windows, Linux, and macOS forensics to threat hunting fundamentals, our on-demand courses help you interpret evidence and investigate with confidence.

Learn at your own pace • 365-day course access • Hands-on exercises and labs

  • $295

Architecting the Hunt

  • Course
  • 32 Lessons
  • 365-day access

Great threat hunting starts with the right questions. This entry-level mini course teaches you a repeatable framework that turns guesswork into a disciplined cycle. You'll learn how to form a hypothesis, acquire the right data, apply core hunting techniques, counter the biases that derail investigations, and communicate your findings. Then practice what you learned in a hands-on lab. No prior experience needed!
Course details

  • $795

Investigating Windows Endpoints

  • Course
  • 42 Lessons
  • 365-day access

Discover the world of Windows forensic investigation through professional, in-depth training crafted from the expertise behind the 13Cubed YouTube channel. This course delivers affordable and comprehensive content, tailored to help newcomers, experienced professionals looking to sharpen their skills, and anyone fascinated by digital forensics.
Course details

  • $795

Investigating Windows Memory

  • Course
  • 57 Lessons
  • 365-day access

If you've taken Investigating Windows Endpoints (or already have the equivalent knowledge), this is a natural continuation of the content that deep dives into Windows memory forensics. Learn the foundations of how Windows memory is structured, how to acquire memory, how to analyze memory images using Volatility, MemProcFS, and WinDbg, and more!
Course details

  • $1,395

Investigating Windows Bundle

  • Bundle
  • 2 Items

Master Windows forensic investigation with 365-day access to Investigating Windows Endpoints and Investigating Windows Memory. Designed for both beginners and seasoned professionals, these courses guide you from foundational endpoint analysis to advanced memory forensics. Each course includes a Knowledge Assessment and separate certifications.
Course details

  • $895

Investigating Linux Devices

  • Course
  • 51 Lessons
  • 365-day access

Starting with fundamental principles, Investigating Linux Devices rapidly progresses to encompass log analysis, file systems, persistence mechanisms, memory forensics, live response, and more! This course offers extensive hands-on practice and a capstone involving the analysis of a compromised system. Tailored for both beginners and seasoned professionals, it serves as an ideal resource for mastering Linux forensics!
Course details

  • $895

Investigating macOS Endpoints

  • Course
  • 52 Lessons
  • 365-day access

Starting with fundamental principles, Investigating macOS Endpoints advances to encompass log analysis, file systems, forensic artifacts, persistence mechanisms, evidence collection, and more! This course offers extensive hands-on practice and a capstone involving the analysis of a compromised system. Tailored for both beginners and seasoned professionals, it serves as an ideal resource for mastering macOS forensics!
Course details

  • $1,695

*NIX Bundle

  • Bundle
  • 2 Items

Master Linux and macOS forensic investigation with 365-day access to Investigating Linux Devices and Investigating macOS Endpoints. Designed for beginners and seasoned professionals, these courses cover foundational concepts through advanced analysis. Each course includes a Knowledge Assessment and separate certifications.
Course details

  • $2,195

XPlat Bundle

  • Bundle
  • 3 Items

Master cross-platform forensics with 365-day access to Investigating Windows Endpoints, Investigating Windows Memory, and Investigating Linux Devices. Designed for beginners and seasoned professionals, these courses cover foundational to advanced Windows and Linux analysis. Each course includes a Knowledge Assessment and separate certifications.
Course details

  • $2,995

XPlat Bundle Complete

  • Bundle
  • 4 Items

Master cross-platform forensics with our most comprehensive bundle. Enjoy 365-day access to Investigating Windows Endpoints, Investigating Windows Memory, Investigating Linux Devices, and Investigating macOS Endpoints. Designed for beginners and seasoned professionals, these courses cover Windows, Linux, and macOS. Each course includes a Knowledge Assessment and separate certifications.
Course details

🎬 Trailer

Get an inside look at the Investigating Windows Endpoints and Investigating Windows Memory courses, and see how this detailed training builds a deep understanding of Windows forensics.

🎬 Trailer

Preview the Investigating Linux Devices course and see how it provides an in-depth, hands-on approach to examining logs, file systems, forensic artifacts, and memory across Linux environments.

🎬 Trailer

Preview the Investigating macOS Endpoints course and see how it offers a comprehensive look at logs, file systems, forensic artifacts, and more on modern macOS systems.

Trusted Globally