DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR308: Digital Forensics Essentials
Training Event Location Dates Training Type
Open-Source Intelligence Summit & Training 2021 Virtual - US Eastern, Feb 08 - Feb 23, 2021 Summit
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Secure Australia 2021 Live Online , Australia Mar 22 - Mar 27, 2021 TBD
SANS Secure Australia 2021 Canberra, Australia Mar 22 - Mar 27, 2021 Live Training
SANS Cyber Security East: April 2021 , Apr 12 - Apr 17, 2021 TBD
SANS Security West 2021 , May 10 - May 15, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Canberra Spring 2021 , Australia Nov 08 - Nov 13, 2021 Live Training
SANS Canberra Spring 2021 - Live Online , Australia Nov 08 - Nov 13, 2021 TBD
SANS OnDemand Online Anytime Online
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
SANS Cyber Security East: March 2021 , Mar 01 - Mar 06, 2021 TBD
SANS Secure Asia Pacific 2021 , Singapore Mar 08 - Mar 20, 2021 TBD
SANS Secure Asia Pacific 2021 Singapore, Singapore Mar 08 - Mar 20, 2021 Live Training
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Cyber Security Mountain: April 2021 , Apr 05 - Apr 10, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Stockholm May 2021 Virtual - Central European Summer Time, Sweden May 31 - Jun 05, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS OnDemand Online Anytime Online
FOR498A: Battlefield Acquisition
Training Event Location Dates Training Type
FOR498T: Triage and Early Analysis
Training Event Location Dates Training Type
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Cyber Security West: Feb 2021 , Feb 01 - Feb 06, 2021 TBD
SANS Cyber Security East: March 2021 , Mar 01 - Mar 06, 2021 TBD
SANS Paris March 2021 Virtual - Central Eurpean Time, France Mar 08 - Mar 13, 2021 TBD
SANS Cyber Security West: March 2021 , Mar 15 - Mar 20, 2021 TBD
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Cyber Security East: April 2021 , Apr 12 - Apr 17, 2021 TBD
SANS Autumn Australia 2021 Sydney, Australia Apr 12 - Apr 17, 2021 Live Training
SANS Autumn Australia 2021 - Live Online , Australia Apr 12 - Apr 17, 2021 TBD
SANS Rocky Mountain Spring: Virtual Edition 2021 , Apr 26 - May 01, 2021 TBD
SANS Brussels April 2021 Virtual - Central European Summer Time, Belgium Apr 26 - May 01, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Security West 2021 , May 10 - May 15, 2021 TBD
SANS Stockholm May 2021 Virtual - Central European Summer Time, Sweden May 31 - Jun 05, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS FOR500 In Italian June 2021 Virtual - Central European Summer Time, Italy Jun 07 - Jun 12, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS Cyber Defence Asia Pacific 2021 , Australia Jun 28 - Jul 10, 2021 Live Training
SANS Cyber Defence Japan 2021 Tokyo, Japan Jun 28 - Jul 10, 2021 TBD
SANS Cyber Defence Asia Pacific 2021 - Live Online , Australia Jun 28 - Jul 10, 2021 TBD
SANS Cyber Defence India 2021 , Singapore Sep 20 - Sep 25, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS October Singapore 2021 , Singapore Oct 11 - Oct 23, 2021 Live Training
SANS October Singapore 2021 - Live Online , Singapore Oct 11 - Oct 23, 2021 TBD
SANS London November 2021 Virtual - Greenwich Mean Time, United Kingdom Nov 01 - Nov 06, 2021 TBD
SANS APAC ICS Summit & Training Singapore, Singapore Nov 15 - Nov 20, 2021 Live Training
SANS APAC ICS Summit & Training - Live Online Singapore, Singapore Nov 15 - Nov 20, 2021 TBD
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
SANS DFIR Europe Multi-Week 2021 Virtual - Central European Time, Netherlands Feb 01 - Feb 12, 2021 TBD
SANS South by Southeast Asia 2021 , Singapore Feb 01 - Feb 06, 2021 TBD
SANS Scottsdale: Virtual Edition 2021 , Feb 22 - Feb 27, 2021 TBD
SANS Secure Japan 2021 , Japan Feb 22 - Mar 13, 2021 TBD
SANS Secure Asia Pacific 2021 , Singapore Mar 08 - Mar 20, 2021 TBD
SANS Secure Asia Pacific 2021 Singapore, Singapore Mar 08 - Mar 20, 2021 Live Training
SANS Gulf Region Spring 2021 Virtual - Gulf Standard Time, United Arab Emirates Mar 13 - Mar 18, 2021 TBD
SANS Cyber Security West: March 2021 , Mar 15 - Mar 20, 2021 TBD
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Munich March 2021 Virtual - Central European Time, Germany Mar 22 - Mar 27, 2021 TBD
SANS Cyber Security Mountain: April 2021 , Apr 05 - Apr 10, 2021 TBD
SANS Autumn Australia 2021 Sydney, Australia Apr 12 - Apr 17, 2021 Live Training
SANS London April 2021 Virtual - British Summer Time, United Kingdom Apr 12 - Apr 17, 2021 TBD
SANS Autumn Australia 2021 - Live Online , Australia Apr 12 - Apr 17, 2021 TBD
SANS Baltimore Spring: Virtual Edition 2021 , Apr 26 - May 01, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Security West 2021 , May 10 - May 15, 2021 TBD
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS Cyber Defence Asia Pacific 2021 , Australia Jun 28 - Jul 10, 2021 Live Training
SANS Cyber Defence Japan 2021 Tokyo, Japan Jun 28 - Jul 10, 2021 TBD
SANS Cyber Defence Asia Pacific 2021 - Live Online , Australia Jun 28 - Jul 10, 2021 TBD
SANS London July 2021 Virtual - British Summer Time, United Kingdom Jul 05 - Jul 10, 2021 TBD
SANS Wellington August 2021 Wellington, New Zealand Aug 02 - Aug 07, 2021 Live Training
SANS Wellington August 2021 - Live Online Wellington, New Zealand Aug 02 - Aug 07, 2021 TBD
SANS Prague August 2021 Virtual - Central European Summer Time, Czech Republic Aug 09 - Aug 14, 2021 TBD
South By Southeast Asia August 2021 , Singapore Aug 09 - Aug 14, 2021 TBD
Cyber Defence Singapore August 2021 Singapore, Singapore Aug 16 - Aug 21, 2021 Live Training
SANS Cyber Defence Singapore August 2021 , Singapore Aug 16 - Aug 21, 2021 TBD
SANS Amsterdam September 2021 Virtual - Central European Summer Time, Netherlands Sep 06 - Sep 11, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Munich October 2021 Virtual - Central European Summer Time, Germany Oct 18 - Oct 23, 2021 TBD
SANS FOR508 In Italian October 2021 Virtual - Central European Summer Time, Italy Oct 18 - Oct 23, 2021 TBD
SANS London November 2021 Virtual - Greenwich Mean Time, United Kingdom Nov 01 - Nov 06, 2021 TBD
SANS APAC ICS Summit & Training Singapore, Singapore Nov 15 - Nov 20, 2021 Live Training
South by SE Asia November 2021 , Singapore Nov 15 - Nov 20, 2021 TBD
SANS Paris November 2021 Virtual - Central European Time, France Nov 15 - Nov 20, 2021 TBD
SANS APAC ICS Summit & Training - Live Online Singapore, Singapore Nov 15 - Nov 20, 2021 TBD
SANS Tokyo Winter 2021 , Japan Nov 29 - Dec 11, 2021 TBD
SANS OnDemand Online Anytime Online
FOR508A: Anti-Forensics Detection & Analysis
Training Event Location Dates Training Type
FOR508S: Lethal Threat Hunting and IR
Training Event Location Dates Training Type
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS DFIR Europe Multi-Week 2021 Virtual - Central European Time, Netherlands Feb 01 - Feb 12, 2021 TBD
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Brussels April 2021 Virtual - Central European Summer Time, Belgium Apr 26 - May 01, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS DFIR Europe Multi-Week 2021 Virtual - Central European Time, Netherlands Feb 01 - Feb 12, 2021 TBD
SANS Scottsdale: Virtual Edition 2021 , Feb 22 - Feb 27, 2021 TBD
SANS Riyadh March 2021 , Kingdom Of Saudi Arabia Mar 20 - Apr 01, 2021 TBD
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Secure Australia 2021 Live Online , Australia Mar 22 - Mar 27, 2021 TBD
SANS Secure Australia 2021 Canberra, Australia Mar 22 - Mar 27, 2021 Live Training
SANS Cyber Security Mountain: April 2021 , Apr 05 - Apr 10, 2021 TBD
SANS London April 2021 Virtual - British Summer Time, United Kingdom Apr 12 - Apr 17, 2021 TBD
SANS Secure India 2021 , Singapore Apr 19 - Apr 24, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Security West 2021 , May 10 - May 15, 2021 TBD
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS October Singapore 2021 , Singapore Oct 11 - Oct 23, 2021 Live Training
SANS October Singapore 2021 - Live Online , Singapore Oct 11 - Oct 23, 2021 TBD
SANS Tokyo Autumn 2021 , Japan Oct 18 - Oct 30, 2021 TBD
SANS OnDemand Online Anytime Online
FOR572L: Lethal Network Forensics
Training Event Location Dates Training Type
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
Open-Source Intelligence Summit & Training 2021 Virtual - US Eastern, Feb 08 - Feb 23, 2021 Summit
SANS London February 2021 Virtual - Greenwich Mean Time, United Kingdom Feb 22 - Feb 27, 2021 TBD
SANS Secure Asia Pacific 2021 , Singapore Mar 08 - Mar 20, 2021 TBD
SANS Secure Asia Pacific 2021 Singapore, Singapore Mar 08 - Mar 20, 2021 Live Training
SANS Gulf Region Spring 2021 Virtual - Gulf Standard Time, United Arab Emirates Mar 13 - Mar 18, 2021 TBD
SANS Cyber Security West: March 2021 , Mar 15 - Mar 20, 2021 TBD
SANS Cyber Security East: April 2021 , Apr 12 - Apr 17, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Cyber Defence Japan 2021 Tokyo, Japan Jun 28 - Jul 10, 2021 TBD
SANS London July 2021 Virtual - British Summer Time, United Kingdom Jul 05 - Jul 10, 2021 TBD
Cyber Defence Singapore August 2021 Singapore, Singapore Aug 16 - Aug 21, 2021 Live Training
SANS Cyber Defence Singapore August 2021 , Singapore Aug 16 - Aug 21, 2021 TBD
SANS Amsterdam September 2021 Virtual - Central European Summer Time, Netherlands Sep 06 - Sep 11, 2021 TBD
SANS FOR578 (In Spanish) November 2021 Virtual - Central European Time, Spain Nov 29 - Dec 04, 2021 TBD
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Brussels April 2021 Virtual - Central European Summer Time, Belgium Apr 26 - May 01, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS OnDemand Online Anytime Online
FOR585A: Android Forensic Analysis
Training Event Location Dates Training Type
FOR585I: iOS Forensic Analysis
Training Event Location Dates Training Type
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Scottsdale: Virtual Edition 2021 , Feb 22 - Feb 27, 2021 TBD
SANS Secure Japan 2021 , Japan Feb 22 - Mar 13, 2021 TBD
SANS Paris March 2021 Virtual - Central Eurpean Time, France Mar 08 - Mar 13, 2021 TBD
SANS Secure Asia Pacific 2021 , Singapore Mar 08 - Mar 20, 2021 TBD
SANS Secure Asia Pacific 2021 Singapore, Singapore Mar 08 - Mar 20, 2021 Live Training
SANS 2021 , Mar 22 - Mar 27, 2021 TBD
SANS Cyber Security Mountain: April 2021 , Apr 05 - Apr 10, 2021 TBD
SANS Secure India 2021 , Singapore Apr 19 - Apr 24, 2021 TBD
SANS Brussels April 2021 Virtual - Central European Summer Time, Belgium Apr 26 - May 01, 2021 TBD
SANS DFIRCON Spring 2021 , May 03 - May 08, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Cyber Defence Japan 2021 Tokyo, Japan Jun 28 - Jul 10, 2021 TBD
SANS In French September 2021 Virtual - Central European Summer Time, France Sep 27 - Oct 02, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Tokyo Autumn 2021 , Japan Oct 18 - Oct 30, 2021 TBD
SANS OnDemand Online Anytime Online
FOR610S: Lethal Malware Analysis
Training Event Location Dates Training Type