DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Frankfurt 2016 Frankfurt, Germany Dec 12 - Dec 17, 2016 Live Training
Cyber Defense Initiative 2016 - FOR408: Windows Forensic Analysis Online Dec 12 - Dec 17, 2016 vLive!
SANS Las Vegas 2017 Las Vegas, NV Jan 23 - Jan 30, 2017 Live Training
SANS Munich Winter 2017 Munich, Germany Feb 13 - Feb 18, 2017 Live Training
SANS Secure Japan 2017 Tokyo, Japan Feb 13 - Feb 25, 2017 Live Training
SANS Scottsdale 2017 Scottsdale, AZ Feb 20 - Feb 25, 2017 Live Training
Community SANS Columbia FOR408 Columbia, MD Feb 20 - Feb 25, 2017 Community SANS
SANS Secure Singapore 2017 Singapore, Singapore Mar 13 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS 2017 - FOR408: Windows Forensic Analysis Online Apr 09 - Apr 14, 2017 vLive!
SANS Security West 2017 San Diego, CA May 09 - May 18, 2017 Live Training
SANS Northern Virginia - Reston 2017 Reston, VA May 21 - May 26, 2017 Live Training
SANS London May 2017 London, United Kingdom May 22 - May 27, 2017 Live Training
SANS San Francisco Summer 2017 San Francisco, CA Jun 05 - Jun 10, 2017 Live Training
SANS vLive - FOR408: Windows Forensic Analysis Online Jun 06 - Jul 13, 2017 vLive!
SANS Charlotte 2017 Charlotte, NC Jun 12 - Jun 17, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
Community SANS Columbia FOR408 Columbia, MD Aug 14 - Aug 19, 2017 Community SANS
SANS Adelaide 2017 Adelaide, Australia Aug 21 - Aug 26, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
Cyber Defense Initiative 2016 - FOR508: Advanced Digital Forensics and Incident Response Online Dec 12 - Dec 17, 2016 vLive!
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
SANS Brussels Winter 2017 Brussels, Belgium Jan 16 - Jan 21, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
Cyber Threat Intelligence Summit - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Jan 25 - Jan 30, 2017 vLive!
SANS Southern California - Anaheim 2017 Anaheim, CA Feb 06 - Feb 11, 2017 Live Training
SANS Oslo 2017 Oslo, Norway Feb 06 - Feb 11, 2017 Live Training
SANS Secure Japan 2017 Tokyo, Japan Feb 13 - Feb 25, 2017 Live Training
SANS Secure India 2017 Bangalore, India Feb 20 - Mar 14, 2017 Live Training
SANS vLive - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Feb 20 - Mar 29, 2017 vLive!
SANS Tysons Corner Spring 2017 McLean, VA Mar 20 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS 2017 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Apr 09 - Apr 14, 2017 vLive!
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS Baltimore Spring 2017 Baltimore, MD Apr 24 - Apr 29, 2017 Live Training
Community SANS New York FOR508 New York, NY May 08 - May 13, 2017 Community SANS
SANS Security West 2017 San Diego, CA May 09 - May 18, 2017 Live Training
SANS London May 2017 London, United Kingdom May 22 - May 27, 2017 Live Training
SANS Melbourne 2017 Melbourne, Australia May 22 - May 27, 2017 Live Training
SANS Rocky Mountain 2017 Denver, CO Jun 12 - Jun 17, 2017 Live Training
SANS Secure Europe 2017 Amsterdam, Netherlands Jun 12 - Jun 17, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANS Long Beach 2017 Long Beach, CA Jul 10 - Jul 15, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
Community SANS Columbia FOR508 Columbia, MD Jul 31 - Aug 05, 2017 Community SANS
Community SANS Columbia FOR508 Columbia, MD Aug 21 - Aug 26, 2017 Community SANS
SANS vLive - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Oct 16 - Nov 22, 2017 vLive!
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS Security West 2017 San Diego, CA May 09 - May 18, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
SANS Secure Singapore 2017 Singapore, Singapore Mar 13 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS London May 2017 London, United Kingdom May 22 - May 27, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS Las Vegas 2017 Las Vegas, NV Jan 23 - Jan 30, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS Munich Winter 2017 Munich, Germany Feb 13 - Feb 18, 2017 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Feb 28 - Apr 06, 2017 vLive!
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
Security Operations Center Summit & Training Washington, DC Jun 05 - Jun 12, 2017 Summit
SANS Secure Europe 2017 Amsterdam, Netherlands Jun 12 - Jun 17, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Aug 15 - Sep 21, 2017 vLive!
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
Cyber Threat Intelligence Summit - FOR578: Cyber Threat Intelligence Online Jan 26 - Jan 30, 2017 vLive!
SANS Secure India 2017 Bangalore, India Feb 20 - Mar 14, 2017 Live Training
SANS London March 2017 London, United Kingdom Mar 13 - Mar 18, 2017 Live Training
SANS Secure Singapore 2017 Singapore, Singapore Mar 13 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS 2017 - FOR578: Cyber Threat Intelligence Online Apr 09 - Apr 13, 2017 vLive!
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS Security West 2017 San Diego, CA May 09 - May 18, 2017 Live Training
SANS London May 2017 London, United Kingdom May 22 - May 27, 2017 Live Training
SANS Atlanta 2017 Atlanta, GA May 30 - Jun 04, 2017 Live Training
SANS San Francisco Summer 2017 San Francisco, CA Jun 05 - Jun 10, 2017 Live Training
SANS Rocky Mountain 2017 Denver, CO Jun 12 - Jun 17, 2017 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Jun 12 - Jul 12, 2017 vLive!
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS Columbia, MD 2017 Columbia, MD Jun 26 - Jul 01, 2017 Live Training
SANS Cyber Defence Canberra 2017 Canberra, Australia Jun 26 - Jul 08, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS Secure Singapore 2017 Singapore, Singapore Mar 13 - Mar 25, 2017 Live Training
SANS vLive - FOR585: Advanced Smartphone Forensics Online Mar 27 - May 03, 2017 vLive!
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS London May 2017 London, United Kingdom May 22 - May 27, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Brussels Winter 2017 Brussels, Belgium Jan 16 - Jan 21, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
Cyber Threat Intelligence Summit - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jan 25 - Jan 30, 2017 vLive!
SANS London March 2017 London, United Kingdom Mar 13 - Mar 18, 2017 Live Training
SANS Secure Singapore 2017 Singapore, Singapore Mar 13 - Mar 25, 2017 Live Training
SANS Tysons Corner Spring 2017 McLean, VA Mar 20 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
Mentor Session - FOR610 Mexico City, Mexico Apr 22 - May 20, 2017 Mentor
SANS Stockholm 2017 Stockholm, Sweden May 29 - Jun 03, 2017 Live Training
Digital Forensics Summit & Training Austin, TX Jun 22 - Jun 29, 2017 Summit
SANS Cyber Defence Canberra 2017 Canberra, Australia Jun 26 - Jul 08, 2017 Live Training
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jul 11 - Aug 17, 2017 vLive!
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
Community SANS Ottawa FOR610 Ottawa, ON Sep 18 - Sep 23, 2017 Community SANS
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online