GIAC Advanced Smartphone Forensics (GASF) Certification

The GASF certification will be available soon. The GASF certification is for professionals who want to demonstrate that they are qualified to perform forensic examinations on devices such as mobile phones and tablets.
 

Threat Hunting & Incident Response Summit & Training

SANS DFIR will host the Threat Hunting & Incident Response Summit once again in New Orleans. The two-day Summit, co-hosted by Carbon Black will feature expert presentations covering the latest threat hunting and incident response techniques being used to identify, contain, and eliminate adversaries targeting organizations.
 

DFIR Netwars Continuous

DFIR NetWars Continuous is an online version of the DFIR NetWars live tournament that allows you to compete for a period of four months. It provides the same vast amount of forensic, malware analysis, and threat hunting challenges as a live tournament, and it is organized into the same four levels; however, due to its extended timespan, competitors enjoy more in-depth challenges and are able to grow their skills at their own pace.
 

SIFT Workstation


Free VMware Appliance
An international team of forensics experts, led by SANS Faculty Fellow Rob Lee, created the SANS Investigative Forensic Toolkit (SIFT) Workstation and made it available to the whole community as a public service. The SIFT Workstation is a VMware appliance, pre-configured with the necessary tools to perform detailed digital forensic examination in a variety of settings.
 

Limited Time Special Offer

Save $400 or get a GIAC Certification Attempt Included with any SANS Online Training Course when you register by March 1!
 
1 2 3 4 5
Mission Statement

Every organization will eventually deal with cyber-crime. Fraud, intrusion, insider threats, phishing and other cyber-crimes are now a fact of life. If you are an IT or law enforcement professional and don't know how to look for and sort out these cases, your skills are becoming less valuable every day. Read More

Community Resources

The SANS Computer Forensics and e-Discovery Community offers digital forensics professionals an opportunity to learn, dicuss, and share current developments in the field. It also provides information regarding forensics training, certification, and events. Read More

Course Overview

Unpatched, unprotected computers connected to the Internet are compromised in less than 3 days. The Computer Forensics, Investigation and Response course from SANS will teach you techniques and tools for sucessful forensics investigations in a hands-on and practical way; for both Windows and Linux. Read More

Author Statement

"SANS Computer Forensics Graduate Thwarts Bank Heist" - Headlines similar to these are now a reality as former students have emailed me regularly about how they were able to use their forensic skills in very real situations. Read More


SANS 2017 - Orlando