This chapter discusses in detail the forensics training form of cybersecurity training. An overview of the forensics training methodology is provided first, focusing on the interdependency with respect to the other forms of cybersecurity training, namely attack and defense training. The two main forensics training types, fundamental forensics training and forensic methodology training, are presented next, examining in detail the various methods used to teach or learn basic forensic skills, as well as the actual forensics process. A set of additional resources is also provided, such as forensic methodology guidelines by NIST and ISO/IEC, as well as forensics training tools (ExifTools, Ghidra, Volatility, Wireshark) and platforms. Finally, the main advantages of forensics training, as well as potential issues that may arise, are discussed, both from the trainee and organizer perspectives.