SANS Training, Without Travel

SANS remains committed to providing you with:
  • The world's best cybersecurity training
  • Several battle-tested online platforms
  • The same Instructors, content, and learning results
  • Hands-on labs and subject matter expert support
  •  

    Are you a LEO affected by training cuts?

    SANS is proud to support U.S. Law Enforcement professionals experiencing hardship funding their training efforts. We have created special programs that can offer significant flexibility toward SANS DFIR courses. Check if you qualify!
     

    NEW DFIR COURSE: FOR308 Digital Forensics Essentials

    FOR308 is an introductory course created for digital forensics practitioners who are looking to take their capabilities to a whole new level, non-technical students getting into the field, or individuals in need to understand how it all fits together. Special pricing at the DFIR Summit
     

    Free Community Resources

    SANS instructors produce thousands of free content-rich resources for the information security community. These resources are aimed to provide the latest in research and technology available to help support awareness and growth across a wide range of IT and OT security considerations.
     

    DFIR Summit & Training - Live Online


    Summit: July 16-17 | Training: July 20-25
    The most action-packed DFIR event of the year is back, and it's coming to you Live Online! Enjoy two days of in-depth digital forensics and incident response Summit talks, ten hands-on SANS DFIR Live Online Courses, DFIRNetWars, and one-of-a-kind virtual networking opportunities — all in one place.
     
    1 2 3 4 5
    DFIR Courses

    Whether you're seeking to maintain a trail of evidence on host or network systems or hunting for threats using similar techniques, larger organizations are in need of specialized professionals who can move beyond first-response incident handling to analyze an attack and develop an appropriate remediation and recovery plan. Our DFIR Courses will teach you how to detect compromised systems, identify how and when a breach occurred, understand what attackers took or changed, and successfully contain and remediate incidents.
    Read More

    Resources

    Every year the SANS Digital Forensics & Incident Response (DFIR) Faculty produces thousands of free content rich resources for the digital forensics community. These resources are aimed to provide you with the latest in research and technology available to help you streamline your investigations. Our number one priority is to support the DFIR community by not only providing content to solve even the most difficult problems investigators face daily, but also provide an open forum for community mentoring, development and support.
    Read More

    SIFT Workstation

    Developed by an international team of forensics experts, the SIFT Workstation is available to the digital forensics and incident response community as a public service. SIFT features powerful cutting-edge open-source tools that are freely available and frequently updated and can match any modern DFIR tool suite. Thousands of individuals download the SIFT workstation yearly and many organizations had found SIFT to be the key investigative suite to use during their investigations.
    Download it now

    Keep up with the DFIR industry!

    Follow us on social media or register for our Community List Service and Monthly DFIR Newsletter