NoticeApplications are open — join the founding team and help build the first student-led DFIR collective.
Plans
Where we are now and where we are going — the phases, milestones, and what we plan to publish next.
Recruit and onboard the founding analysts who will run the first mock case: evidence custody, endpoint, network, memory, timeline, and legal review.
Open applications and assemble the founding team. The Lead covers coordination at first, and the Legal & Digital Evidence Advisor can begin as a mentor.
Analyse public disk, memory, and network evidence as a team and publish one complete investigation report.
Execute Case File 001 end to end and release the report and supporting write-ups on GitHub.
Add the remaining roles: operations, threat intel and OSINT, mobile, multimedia, cloud, and AI forensics.
Build stronger workflows, publish more cases, and expand the team's public footprint.
More investigations, research projects, and public resources. Strengthen partnerships and grow the community.
Dates are planned milestones, not guarantees — we publish updates as each phase ships.
Join the Collective
The founding team builds everything on this roadmap. Applications are open.
Real Cases
Real Skills
Real Impact
