Forensics Training & Courses

Forensics Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Virginia Beach 2014 Virginia Beach, VA Aug 18 - Aug 29, 2014 Live Training
SANS Crystal City 2014 Crystal City, VA Sep 08 - Sep 13, 2014 Live Training
Community SANS Madrid FOR408 (in Spanish) Madrid, Spain Sep 08 - Sep 13, 2014 Community SANS
Community SANS Paris @ HSC - FOR408 (in French) Paris, France Sep 15 - Sep 19, 2014 Community SANS
SANS Baltimore 2014 Baltimore, MD Sep 22 - Sep 27, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SANS Seattle 2014 Seattle, WA Sep 29 - Oct 06, 2014 Live Training
SANS vLive - FOR408: Computer Forensic Investigations - Windows In-Depth Online Oct 06 - Nov 12, 2014 vLive!
SANS Hong Kong 2014 Hong Kong, Hong Kong Oct 06 - Oct 11, 2014 Live Training
Mentor Session - FOR408 Winchester, MA Oct 07 - Dec 09, 2014 Mentor
Community SANS Minneapolis Minneapolis, MN Oct 13 - Oct 18, 2014 Community SANS
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
Community SANS FOR408 Johannesburg Sandton, South Africa Oct 27 - Nov 01, 2014 Community SANS
SANS DFIRCON East 2014 Fort Lauderdale, FL Nov 03 - Nov 08, 2014 Live Training
SANS Cyber Defense Initiative 2014 Washington, DC Dec 10 - Dec 19, 2014 Live Training
SANS Oman 2015 Muscat, Oman Jan 03 - Jan 08, 2015 Live Training
Mentor Session - FOR 408 San Antonio, TX Jan 15 - Mar 19, 2015 Mentor
SANS Security East 2015 New Orleans, LA Jan 16 - Jan 21, 2015 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jul 07 - Jul 14, 2015 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Computer Forensic Analysis and Incident Response
Training Event Location Dates Training Type
Mentor Session - FOR 508 Saint Louis, MO Aug 06 - Oct 08, 2014 Mentor
SANS Virginia Beach 2014 Virginia Beach, VA Aug 18 - Aug 29, 2014 Live Training
SANS Chicago 2014 Chicago, IL Aug 24 - Aug 29, 2014 Live Training
SANS Bangalore 2014 Bangalore, India Sep 15 - Sep 27, 2014 Live Training
SANS Albuquerque 2014 Albuquerque, NM Sep 15 - Sep 20, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
FOR 508 Leon Guanajuato, Mexico Oct 04 - Dec 13, 2014 Mentor
SOS: SANS October Singapore 2014 Singapore, Singapore Oct 07 - Oct 18, 2014 Live Training
SANS vLive - FOR508: Advanced Computer Forensic Analysis and Incident Response Online Oct 14 - Nov 20, 2014 vLive!
Mentor Session - FOR 508 Atlanta, GA Oct 14 - Dec 16, 2014 Mentor
Mentor Session - FOR 508 Palo Alto, CA Oct 14 - Dec 16, 2014 Mentor
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
Community SANS Paris @ HSC - FOR508 (in French) Paris, France Nov 03 - Nov 07, 2014 Community SANS
Community SANS FOR508 Johannesburg Sandton, South Africa Nov 03 - Nov 08, 2014 Community SANS
SANS Tokyo Autumn 2014 Tokyo, Japan Nov 10 - Nov 15, 2014 Live Training
SANS London 2014 London, United Kingdom Nov 15 - Nov 24, 2014 Live Training
Healthcare Cyber Security Summit San Francisco, CA Dec 03 - Dec 10, 2014 Summit
SANS Cyber Defense Initiative 2014 Washington, DC Dec 10 - Dec 19, 2014 Live Training
SANS CDI 2014 - FOR508: Advanced Computer Forensic Analysis and Incident Response Online Dec 12 - Dec 17, 2014 vLive!
SANS Brussels 2015 Brussels, Belgium Jan 26 - Jan 31, 2015 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jul 07 - Jul 14, 2015 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS Crystal City 2014 Crystal City, VA Sep 08 - Sep 13, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SANS Seattle 2014 Seattle, WA Sep 29 - Oct 06, 2014 Live Training
SANS DFIRCON East 2014 Fort Lauderdale, FL Nov 03 - Nov 08, 2014 Live Training
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS San Antonio 2014 San Antonio, TX Aug 11 - Aug 16, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SOS: SANS October Singapore 2014 Singapore, Singapore Oct 07 - Oct 18, 2014 Live Training
SOS: SANS October Singapore 2014 - FOR526: Windows Memory Forensics In-Depth Online Oct 07 - Oct 12, 2014 vLive!
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
SANS vLive - FOR526: Windows Memory Forensics In-Depth Online Dec 02, 2014 - Jan 22, 2015 vLive!
SANS Cyber Defense Initiative 2014 Washington, DC Dec 10 - Dec 19, 2014 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS San Antonio 2014 San Antonio, TX Aug 11 - Aug 16, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SOS: SANS October Singapore 2014 Singapore, Singapore Oct 07 - Oct 18, 2014 Live Training
SOS: SANS October Singapore 2014 - FOR526: Windows Memory Forensics In-Depth Online Oct 07 - Oct 12, 2014 vLive!
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
SANS vLive - FOR526: Windows Memory Forensics In-Depth Online Dec 02, 2014 - Jan 22, 2015 vLive!
SANS Cyber Defense Initiative 2014 Washington, DC Dec 10 - Dec 19, 2014 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Aug 05 - Sep 11, 2014 vLive!
SANS Bangalore 2014 Bangalore, India Sep 15 - Sep 27, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
Network Security 2014 - FOR572: Advanced Network Forensics and Analysis Online Oct 20 - Oct 25, 2014 vLive!
SANS DFIRCON East 2014 Fort Lauderdale, FL Nov 03 - Nov 08, 2014 Live Training
SANS Sydney 2014 Sydney, Australia Nov 10 - Nov 22, 2014 Live Training
SANS London 2014 London, United Kingdom Nov 15 - Nov 24, 2014 Live Training
SANS Munich 2015 Munich, Germany Feb 23 - Mar 07, 2015 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jul 07 - Jul 14, 2015 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS vLive - FOR585: Advanced Smartphone Forensics Online Aug 19 - Sep 25, 2014 vLive!
SANS Delhi 2014 New Delhi, India Aug 27 - Sep 02, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
SANS DFIRCON East 2014 Fort Lauderdale, FL Nov 03 - Nov 08, 2014 Live Training
SANS Korea 2014 Seoul, Korea, Republic Of Nov 10 - Nov 15, 2014 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Virginia Beach 2014 Virginia Beach, VA Aug 18 - Aug 29, 2014 Live Training
SANS Baltimore 2014 Baltimore, MD Sep 22 - Sep 27, 2014 Live Training
SANS DFIR Prague 2014 Prague, Czech Republic Sep 29 - Oct 11, 2014 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Oct 13 - Nov 19, 2014 vLive!
SANS Network Security 2014 Las Vegas, NV Oct 19 - Oct 27, 2014 Live Training
Community SANS Paris @ HSC - FOR610 (in French) Paris, France Nov 24 - Nov 28, 2014 Community SANS
SANS Cyber Defense Initiative 2014 Washington, DC Dec 10 - Dec 19, 2014 Live Training
SANS CDI 2014 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 12 - Dec 17, 2014 vLive!
SANS Security East 2015 New Orleans, LA Jan 16 - Jan 21, 2015 Live Training
SANS Dubai 2015 Dubai, United Arab Emirates Jan 31 - Feb 05, 2015 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jul 07 - Jul 14, 2015 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online