DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Baltimore Spring 2016 Baltimore, MD May 09 - May 14, 2016 Live Training
SANS Houston 2016 Houston, TX May 09 - May 14, 2016 Live Training
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR408: Windows Forensic Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Rocky Mountain 2016 Denver, CO Jul 11 - Jul 16, 2016 Live Training
Community SANS New York FOR408 New York, NY Jul 18 - Jul 23, 2016 Community SANS
SANS Boston 2016 Boston, MA Aug 01 - Aug 06, 2016 Live Training
SANS Chicago 2016 Chicago, IL Aug 22 - Aug 27, 2016 Live Training
SANS Virginia Beach 2016 Virginia Beach, VA Aug 22 - Sep 02, 2016 Live Training
SANS Northern Virginia - Crystal City 2016 Crystal City, VA Sep 06 - Sep 11, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR408: Windows Forensic Analysis Online Sep 12 - Sep 17, 2016 vLive!
Community SANS Paris FOR408 (in French) Paris, France Sep 19 - Sep 23, 2016 Community SANS
SANS Seattle 2016 Seattle, WA Oct 03 - Oct 08, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS vLive - FOR408: Windows Forensic Analysis Online Oct 11 - Nov 17, 2016 vLive!
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
SANS Frankfurt 2016 Frankfurt, Germany Dec 12 - Dec 17, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics and Incident Response
Training Event Location Dates Training Type
SANS FOR508 Hamburg in German Hamburg, Germany May 09 - May 14, 2016 Live Training
SANS vLive - FOR508: Advanced Digital Forensics and Incident Response Online May 10 - Jun 16, 2016 vLive!
State of New Jersey - FOR508: Advanced Digital Forensics and Incident Response Online May 16 - May 21, 2016 vLive!
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR508: Advanced Digital Forensics and Incident Response Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Salt Lake City 2016 Salt Lake City, UT Jun 27 - Jul 02, 2016 Live Training
SANS Cyber Defence Canberra 2016 Canberra, Australia Jun 27 - Jul 09, 2016 Live Training
SANS London Summer 2016 London, United Kingdom Jul 09 - Jul 18, 2016 Live Training
SANS Minneapolis 2016 Minneapolis, MN Jul 18 - Jul 23, 2016 Live Training
SANS Vienna Vienna, Austria Aug 01 - Aug 06, 2016 Live Training
SANS Portland 2016 Portland, OR Aug 08 - Aug 13, 2016 Live Training
SANS Virginia Beach 2016 Virginia Beach, VA Aug 22 - Sep 02, 2016 Live Training
SANS Brussels Autumn 2016 Brussels, Belgium Sep 05 - Sep 10, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Community SANS Columbia FOR508 Columbia, MD Sep 26 - Oct 01, 2016 Community SANS
SANS vLive - FOR508: Advanced Digital Forensics and Incident Response Online Oct 03 - Nov 09, 2016 vLive!
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
Community SANS Paris FOR508 (in French) Paris, France Nov 14 - Nov 18, 2016 Community SANS
SANS London 2016 London, United Kingdom Nov 14 - Nov 19, 2016 Live Training
Community SANS Madrid FOR508 (in Spanish) Madrid, Spain Nov 21 - Nov 26, 2016 Community SANS
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR518: Mac Forensic Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Virginia Beach 2016 Virginia Beach, VA Aug 22 - Sep 02, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR526: Memory Forensics In-Depth Online Sep 12 - Sep 17, 2016 vLive!
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS Melbourne 2016 Melbourne, Australia May 16 - May 21, 2016 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online May 23 - Jun 29, 2016 vLive!
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR572: Advanced Network Forensics and Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS London Summer 2016 London, United Kingdom Jul 09 - Jul 18, 2016 Live Training
SANS Delhi 2016 Delhi, India Jul 18 - Jul 30, 2016 Live Training
SANS Boston 2016 Boston, MA Aug 01 - Aug 06, 2016 Live Training
SANS Dallas 2016 Dallas, TX Aug 08 - Aug 13, 2016 Live Training
Community SANS Columbia FOR572 Columbia, MD Aug 15 - Aug 20, 2016 Community SANS
SANS Virginia Beach 2016 Virginia Beach, VA Aug 22 - Sep 02, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Community SANS Paris FOR572 (in French) Paris, France Oct 03 - Oct 07, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Nov 08 - Dec 15, 2016 vLive!
SANS London 2016 London, United Kingdom Nov 14 - Nov 19, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR578: Cyber Threat Intelligence Online Jun 13 - Jun 17, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS London Summer 2016 London, United Kingdom Jul 09 - Jul 18, 2016 Live Training
SANS Rocky Mountain 2016 Denver, CO Jul 11 - Jul 16, 2016 Live Training
Rocky Mountain 2016 - FOR578: Cyber Threat Intelligence Online Jul 11 - Jul 15, 2016 vLive!
SANS San Antonio 2016 San Antonio, TX Jul 18 - Jul 23, 2016 Live Training
SANS Chicago 2016 Chicago, IL Aug 22 - Aug 27, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
Community SANS Madrid FOR578 (in Spanish) Madrid, Spain Nov 28 - Dec 02, 2016 Community SANS
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
Community SANS Sunnyvale-Mountain View FOR585 - Google Sunnyvale-Mountain View, CA May 16 - May 21, 2016 Community SANS
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
Community SANS Paris FOR585 (in French) Paris, France Jun 20 - Jun 24, 2016 Community SANS
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Virginia Beach 2016 Virginia Beach, VA Aug 22 - Sep 02, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR585: Advanced Smartphone Forensics Online Sep 12 - Sep 17, 2016 vLive!
Community SANS Madison FOR585 Madison, WI Sep 19 - Sep 24, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Stockholm 2016 Stockholm, Sweden May 09 - May 14, 2016 Live Training
Community SANS Paris FOR610 (in French) Paris, France May 23 - May 28, 2016 Community SANS
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jun 21 - Aug 04, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Dallas 2016 Dallas, TX Aug 08 - Aug 13, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
SANS Hyderabad 2016 Hyderabad, India Nov 28 - Dec 10, 2016 Live Training
SANS Dublin Dublin, Ireland Dec 05 - Dec 10, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online