DFIR training is fragmented, and fragmented training produces fragmented practitioners. And on top of that, we’ve turned artifacts and tools into a fetish, confusing output with understanding and “the tool says…” with a conclusion. DFIR has never bee...