Work in DFIR, taking the OSCP course.