DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Virginia Beach 2015 Virginia Beach, VA Aug 24 - Sep 04, 2015 Live Training
Community SANS Columbia FOR408 Columbia, MD Aug 24 - Aug 29, 2015 Community SANS
SANS Crystal City 2015 Crystal City, VA Sep 08 - Sep 13, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
Community SANS Paris FOR408 (in French) Paris, France Sep 14 - Sep 18, 2015 Community SANS
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SANS Tokyo Autumn 2015 Tokyo, Japan Oct 19 - Oct 31, 2015 Live Training
SANS London 2015 London, United Kingdom Nov 14 - Nov 23, 2015 Live Training
SANS vLive - FOR408: Windows Forensic Analysis Online Dec 01, 2015 - Jan 21, 2016 vLive!
SANS Cyber Defense Initiative 2015 Washington, DC Dec 12 - Dec 19, 2015 Live Training
SANS Brussels Winter 2016 Brussels, Belgium Jan 18 - Jan 23, 2016 Live Training
SANS Security East 2016 New Orleans, LA Jan 25 - Jan 30, 2016 Live Training
SANS Secure Europe 2016 Amsterdam, Netherlands Apr 04 - Apr 16, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics and Incident Response
Training Event Location Dates Training Type
SANS Boston 2015 Boston, MA Aug 03 - Aug 08, 2015 Live Training
SANS Virginia Beach 2015 Virginia Beach, VA Aug 24 - Sep 04, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
Data Breach Investigation Summit & Training Dallas, TX Sep 21 - Sep 26, 2015 Summit
SANS vLive - FOR508: Advanced Computer Forensic Analysis and Incident Response Online Sep 22 - Oct 29, 2015 vLive!
SANS Seattle 2015 Seattle, WA Oct 05 - Oct 10, 2015 Live Training
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SOS: SANS October Singapore 2015 Singapore, Singapore Oct 12 - Oct 24, 2015 Live Training
SANS Tysons Corner 2015 Tysons Corner, VA Oct 12 - Oct 17, 2015 Live Training
SANS Tokyo Autumn 2015 Tokyo, Japan Oct 19 - Oct 31, 2015 Live Training
Community SANS Paris FOR508 (in French) Paris, France Nov 02 - Nov 06, 2015 Community SANS
SANS South Florida 2015 Fort Lauderdale, FL Nov 09 - Nov 14, 2015 Live Training
Community SANS FOR508 Frankfurt (in German) Frankfurt, Germany Nov 09 - Nov 14, 2015 Community SANS
SANS Cape Town 2015 Cape Town, South Africa Nov 30 - Dec 05, 2015 Live Training
SANS Cyber Defense Initiative 2015 Washington, DC Dec 12 - Dec 19, 2015 Live Training
Cyber Defense Initiative 2015 - FOR508: Advanced Digital Forensics and Incident Response Online Dec 14 - Dec 19, 2015 vLive!
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS Virginia Beach 2015 Virginia Beach, VA Aug 24 - Sep 04, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SOS: SANS October Singapore 2015 Singapore, Singapore Oct 12 - Oct 24, 2015 Live Training
SANS San Francisco 2015 San Francisco, CA Nov 30 - Dec 05, 2015 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
SANS Baltimore 2015 Baltimore, MD Sep 21 - Sep 26, 2015 Live Training
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
Community SANS Ottawa FOR526 Ottawa, ON Oct 26 - Oct 31, 2015 Community SANS
SANS Security East 2016 New Orleans, LA Jan 25 - Jan 30, 2016 Live Training
SANS London Spring London, United Kingdom Feb 29 - Mar 05, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
Federal Bureau of Investigation (FBI) - FOR572: Advanced Network Forensics and Analysis Online Aug 10 - Aug 14, 2015 vLive!
SANS San Antonio 2015 San Antonio, TX Aug 17 - Aug 22, 2015 Live Training
SANS Virginia Beach 2015 Virginia Beach, VA Aug 24 - Sep 04, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
Community SANS Columbia FOR572 Columbia, MD Sep 28 - Oct 03, 2015 Community SANS
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Oct 20 - Nov 25, 2015 vLive!
SANS South Florida 2015 Fort Lauderdale, FL Nov 09 - Nov 14, 2015 Live Training
SANS Sydney 2015 Sydney, Australia Nov 09 - Nov 21, 2015 Live Training
SANS Cyber Defense Initiative 2015 Washington, DC Dec 12 - Dec 19, 2015 Live Training
SANS Brussels Winter 2016 Brussels, Belgium Jan 18 - Jan 23, 2016 Live Training
SANS Secure Europe 2016 Amsterdam, Netherlands Apr 04 - Apr 16, 2016 Live Training
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
FOR578 Cyber Threat Intelligence Tysons Corner, VA Aug 31 - Sep 04, 2015 Live Training
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SANS Cyber Defense Initiative 2015 Washington, DC Dec 12 - Dec 19, 2015 Live Training
SANS Las Vegas 2016 Las Vegas, NV Jan 09 - Jan 14, 2016 Live Training
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS Boston 2015 Boston, MA Aug 03 - Aug 08, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
Network Security 2015 - FOR585: Advanced Smartphone Forensics Online Sep 14 - Sep 19, 2015 vLive!
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SANS Tysons Corner 2015 Tysons Corner, VA Oct 12 - Oct 17, 2015 Live Training
SANS South Florida 2015 Fort Lauderdale, FL Nov 09 - Nov 14, 2015 Live Training
Community SANS Paris FOR585 (in French) Paris, France Nov 16 - Nov 20, 2015 Community SANS
Community SANS Chantilly SEC585 Chantilly, VA Dec 07 - Dec 12, 2015 Community SANS
SANS Munich Winter 2016 Munich, Germany Feb 15 - Feb 20, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
Community SANS Columbia FOR610 Columbia, MD Aug 10 - Aug 15, 2015 Community SANS
SANS Virginia Beach 2015 Virginia Beach, VA Aug 24 - Sep 04, 2015 Live Training
SANS Network Security 2015 Las Vegas, NV Sep 12 - Sep 21, 2015 Live Training
SANS DFIR Prague 2015 Prague, Czech Republic Oct 05 - Oct 17, 2015 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Nov 10 - Dec 17, 2015 vLive!
Community SANS Paris FOR610 (in French) Paris, France Nov 30 - Dec 05, 2015 Community SANS
SANS Cyber Defense Initiative 2015 Washington, DC Dec 12 - Dec 19, 2015 Live Training
Community SANS Madrid FOR610 (in Spanish) Madrid, Spain Dec 14 - Dec 19, 2015 Community SANS
SANS Munich Winter 2016 Munich, Germany Feb 15 - Feb 20, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online