SANS Digital Forensics and Incident Response Blog

SANS ThreatConnect DFIR Threat Intelligence Sharing Community Announced

ARLINGTON, Va.-(BUSINESS WIRE)-ThreatConnect Inc., creator of the most widely adopted Threat Intelligence Platform (TIP), today announced a partnership with SANS Digital Forensics and Incident Response (DFIR). The partnership will bring together the two organizations' strengths — ThreatConnect's Cyber Threat Intelligence (CTI) aggregation, analytics and community collaboration with SANS' cutting-edge Incident Response training courses.

"We are seeing more and more analyst collaboration around tradecraft occurring in the Open Source and Industry Communities that we offer through ThreatConnect's TC Exchange and have Community Case Studies that identify analyst learning as a primary benefit associated with participation in our Communities," said Christy Coffey, business development director for ThreatConnect. "SANS is well established as the most trusted and largest source of information security training and their new FOR578 - Cyber Threat Intelligence course promises to greatly expand the field. We are delighted to be working with them on this important initiative."Rob Lee, curriculum lead and instructor for DFIR training, explains, "While DFIR instruction and the FOR578: Cyber Threat Intelligence course provides our students with a strong CTI foundation, we have found that our students want to apply their learning from the classroom immediately in the workplace and need a TIP to be able to effectively do so. In addition, students want to stay connected with instructors and alumni for purposes of continued learning and collaboration around the threats that they are encountering. ThreatConnect fulfills both requirements and allows them to instantly better defend their company networks."

ThreatConnect has already started on-boarding alumni into the new SANS DFIR Alumni Community. Customers and users who have completed DFIR training are encouraged to join the SANS DFIR Alumni Community through TC Exchange. DFIR Alumni who do not yet have a ThreatConnect account, may join the Community at no cost by registering for access at