DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Pittsburgh 2019 Pittsburgh, PA Jul 08 - Jul 13, 2019 Live Training
SANS San Francisco Summer 2019 San Francisco, CA Jul 22 - Jul 27, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR500: Windows Forensic Analysis Online Jul 27 - Aug 01, 2019 vLive!
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
Community SANS Idaho Falls FOR500 Idaho Falls, ID Aug 05 - Aug 10, 2019 Community SANS
SANS Prague August 2019 Prague, Czech Republic Aug 12 - Aug 17, 2019 Live Training
SANS Chicago 2019 Chicago, IL Aug 19 - Aug 24, 2019 Live Training
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS Amsterdam August 2019 Amsterdam, Netherlands Aug 19 - Aug 24, 2019 Live Training
SANS Tampa-Clearwater 2019 Clearwater, FL Aug 25 - Aug 30, 2019 Live Training
SANS Brussels September 2019 Brussels, Belgium Sep 02 - Sep 07, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Paris September 2019 Paris, France Sep 16 - Sep 21, 2019 Live Training
SANS Bahrain September 2019 Manama, Bahrain Sep 21 - Sep 26, 2019 Live Training
Community SANS Tempe FOR500 Tempe, AZ Sep 22 - Sep 27, 2019 Community SANS
SANS San Francisco Fall 2019 San Francisco, CA Sep 23 - Sep 28, 2019 Live Training
SANS Tokyo Autumn 2019 Tokyo, Japan Sep 30 - Oct 12, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Cardiff September 2019 Cardiff, United Kingdom Sep 30 - Oct 05, 2019 Live Training
Mentor Session - FOR500 Minneapolis, MN Oct 02 - Nov 20, 2019 Mentor
SANS October Singapore 2019 Singapore, Singapore Oct 07 - Oct 26, 2019 Live Training
SANS Baltimore Fall 2019 Baltimore, MD Oct 07 - Oct 12, 2019 Live Training
Baltimore Fall 2019 - FOR500: Windows Forensic Analysis Online Oct 07 - Oct 12, 2019 vLive!
SANS Denver 2019 Denver, CO Oct 14 - Oct 19, 2019 Live Training
SANS Santa Monica 2019 Santa Monica, CA Oct 21 - Oct 26, 2019 Live Training
SANS Houston 2019 Houston, TX Oct 28 - Nov 02, 2019 Live Training
SANS Orlando 2019 Orlando, FL Oct 28 - Nov 02, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR500: Windows Forensic Analysis Online Dec 12 - Dec 17, 2019 vLive!
SANS Miami 2020 Miami, FL Jan 13 - Jan 18, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
SANS Cyber Defence Japan 2019 Tokyo, Japan Jul 01 - Jul 13, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
SANS London July 2019 London, United Kingdom Jul 08 - Jul 13, 2019 Live Training
SANS Rocky Mountain 2019 Denver, CO Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Jul 27 - Aug 01, 2019 vLive!
SANS Melbourne 2019 Melbourne, Australia Aug 05 - Aug 10, 2019 Live Training
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
SANS Minneapolis 2019 Minneapolis, MN Aug 12 - Aug 17, 2019 Live Training
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS New York City 2019 New York, NY Aug 25 - Aug 30, 2019 Live Training
SANS Copenhagen August 2019 Copenhagen, Denmark Aug 26 - Aug 31, 2019 Live Training
SANS Philippines 2019 Manila, Philippines Sep 02 - Sep 07, 2019 Live Training
SANS Munich September 2019 Munich, Germany Sep 02 - Sep 07, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Raleigh 2019 Raleigh, NC Sep 16 - Sep 21, 2019 Live Training
SANS Rome September 2019 Rome, Italy Sep 16 - Sep 21, 2019 Live Training
SANS London September 2019 London, United Kingdom Sep 23 - Sep 28, 2019 Live Training
SANS Tokyo Autumn 2019 Tokyo, Japan Sep 30 - Oct 12, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
Threat Hunting & IR Summit 2019 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Oct 02 - Oct 07, 2019 vLive!
SANS October Singapore 2019 Singapore, Singapore Oct 07 - Oct 26, 2019 Live Training
SANS Doha October 2019 Doha, Qatar Oct 12 - Oct 17, 2019 Live Training
SANS Seattle Fall 2019 Seattle, WA Oct 14 - Oct 19, 2019 Live Training
Purple Team Summit & Training 2019 Las Colinas, TX Oct 21 - Oct 28, 2019 Summit
SANS Amsterdam October 2019 Amsterdam, Netherlands Oct 28 - Nov 02, 2019 Live Training
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Austin 2019 Austin, TX Nov 18 - Nov 23, 2019 Live Training
SANS November Singapore 2019 Singapore, Singapore Nov 18 - Nov 23, 2019 Live Training
SANS Atlanta Fall 2019 Atlanta, GA Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Dec 12 - Dec 17, 2019 vLive!
SANS Austin Winter 2020 Austin, TX Jan 06 - Jan 11, 2020 Live Training
SANS San Francisco East Bay 2020 Emeryville, CA Jan 27 - Feb 01, 2020 Live Training
SANS New York City Winter 2020 New York City, NY Feb 10 - Feb 15, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Advanced Memory Forensics & Threat Detection
Training Event Location Dates Training Type
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR526: Advanced Memory Forensics & Threat Detection Online Jul 27 - Aug 01, 2019 vLive!
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Cyber Defence Japan 2019 Tokyo, Japan Jul 01 - Jul 13, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
SANS San Francisco Summer 2019 San Francisco, CA Jul 22 - Jul 27, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Jul 27 - Aug 01, 2019 vLive!
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
SANS Minneapolis 2019 Minneapolis, MN Aug 12 - Aug 17, 2019 Live Training
SANS Amsterdam August 2019 Amsterdam, Netherlands Aug 19 - Aug 24, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Raleigh 2019 Raleigh, NC Sep 16 - Sep 21, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
Threat Hunting & IR Summit 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Oct 02 - Oct 07, 2019 vLive!
SANS October Singapore 2019 Singapore, Singapore Oct 07 - Oct 26, 2019 Live Training
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 12 - Dec 17, 2019 vLive!
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Jul 16 - Aug 15, 2019 vLive!
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS Chicago 2019 Chicago, IL Aug 19 - Aug 24, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Dallas Fall 2019 Dallas, TX Sep 23 - Sep 28, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR578: Cyber Threat Intelligence Online Dec 12 - Dec 16, 2019 vLive!
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
SANS London July 2019 London, United Kingdom Jul 08 - Jul 13, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR585: Advanced Smartphone Forensics Online Jul 27 - Aug 01, 2019 vLive!
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
Network Security 2019 - FOR585: Smartphone Forensic Analysis In-Depth Online Sep 09 - Sep 14, 2019 vLive!
SANS Dallas Fall 2019 Dallas, TX Sep 23 - Sep 28, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS Paris December 2019 Paris, France Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR585: Smartphone Forensic Analysis In-Depth Online Dec 12 - Dec 17, 2019 vLive!
SANS Anaheim 2020 Anaheim, CA Jan 20 - Jan 25, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Munich July 2019 Munich, Germany Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jul 27 - Aug 01, 2019 vLive!
SANS New York City 2019 New York, NY Aug 25 - Aug 30, 2019 Live Training
SANS Canberra Spring 2019 Canberra, Australia Sep 02 - Sep 21, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Europe 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
Threat Hunting & IR Summit 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Oct 02 - Oct 07, 2019 vLive!
SANS Baltimore Fall 2019 Baltimore, MD Oct 07 - Oct 12, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 12 - Dec 17, 2019 vLive!
SANS Northern VA - Fairfax 2020 Fairfax, VA Feb 10 - Feb 15, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online