DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Pen Test Austin 2019 Austin, TX Apr 29 - May 04, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Milan May 2019 Milan, Italy May 13 - May 18, 2019 Live Training
SANS Stockholm May 2019 Stockholm, Sweden May 13 - May 18, 2019 Live Training
SANS Northern VA Spring- Reston 2019 Reston, VA May 19 - May 24, 2019 Live Training
Mentor Session - FOR500 Orange County, CA May 25 - Jun 29, 2019 Mentor
SANS San Antonio 2019 San Antonio, TX May 28 - Jun 02, 2019 Live Training
San Antonio 2019 - FOR500: Windows Forensic Analysis Online May 28 - Jun 02, 2019 vLive!
SANS London June 2019 London, United Kingdom Jun 03 - Jun 08, 2019 Live Training
Community SANS Minneapolis FOR500 Minneapolis, MN Jun 03 - Jun 08, 2019 Community SANS
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
Mentor Session - FOR500 Seattle, WA Jun 18 - Aug 06, 2019 Mentor
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Pittsburgh 2019 Pittsburgh, PA Jul 08 - Jul 13, 2019 Live Training
SANS San Francisco Summer 2019 San Francisco, CA Jul 22 - Jul 27, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR500: Windows Forensic Analysis Online Jul 27 - Aug 01, 2019 vLive!
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
SANS Prague August 2019 Prague, Czech Republic Aug 12 - Aug 17, 2019 Live Training
SANS Chicago 2019 Chicago, IL Aug 19 - Aug 24, 2019 Live Training
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS Amsterdam August 2019 Amsterdam, Netherlands Aug 19 - Aug 24, 2019 Live Training
SANS Tampa-Clearwater 2019 Clearwater, FL Aug 25 - Aug 30, 2019 Live Training
SANS Brussels September 2019 Brussels, Belgium Sep 02 - Sep 07, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Paris September 2019 Paris, France Sep 16 - Sep 21, 2019 Live Training
SANS Bahrain September 2019 Manama, Bahrain Sep 21 - Sep 26, 2019 Live Training
Community SANS Tempe FOR500 Tempe, AZ Sep 22 - Sep 27, 2019 Community SANS
SANS San Francisco Fall 2019 San Francisco, CA Sep 23 - Sep 28, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Cardiff September 2019 Cardiff, United Kingdom Sep 30 - Oct 05, 2019 Live Training
Mentor Session - FOR500 Minneapolis, MN Oct 02 - Nov 20, 2019 Mentor
SANS Baltimore Fall 2019 Baltimore, MD Oct 07 - Oct 12, 2019 Live Training
SANS Denver 2019 Denver, CO Oct 14 - Oct 19, 2019 Live Training
SANS Santa Monica 2019 Santa Monica, CA Oct 21 - Oct 26, 2019 Live Training
SANS Houston 2019 Houston, TX Oct 28 - Nov 02, 2019 Live Training
SANS Orlando 2019 Orlando, FL Oct 28 - Nov 02, 2019 Live Training
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
SANS Bucharest May 2019 Bucharest, Romania May 06 - May 11, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS New Orleans 2019 New Orleans, LA May 19 - May 24, 2019 Live Training
SANS Autumn Sydney 2019 Sydney, Australia May 20 - May 25, 2019 Live Training
SANS Hong Kong 2019 Hong Kong, Hong Kong May 20 - May 25, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANS Krakow May 2019 Krakow, Poland May 27 - Jun 01, 2019 Live Training
SANS Atlanta 2019 Atlanta, GA May 28 - Jun 02, 2019 Live Training
SANS Zurich June 2019 Zurich, Switzerland Jun 03 - Jun 08, 2019 Live Training
Enterprise Defense Summit & Training 2019 Redondo Beach, CA Jun 03 - Jun 10, 2019 Summit
SANS Kansas City 2019 Kansas City, MO Jun 10 - Jun 15, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Cyber Defence Japan 2019 Tokyo, Japan Jul 01 - Jul 13, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
SANS London July 2019 London, United Kingdom Jul 08 - Jul 13, 2019 Live Training
SANS Rocky Mountain 2019 Denver, CO Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Jul 27 - Aug 01, 2019 vLive!
SANS Melbourne 2019 Melbourne, Australia Aug 05 - Aug 10, 2019 Live Training
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
SANS Minneapolis 2019 Minneapolis, MN Aug 12 - Aug 17, 2019 Live Training
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS New York City 2019 New York, NY Aug 25 - Aug 30, 2019 Live Training
SANS Copenhagen August 2019 Copenhagen, Denmark Aug 26 - Aug 31, 2019 Live Training
SANS Philippines 2019 Manila, Philippines Sep 02 - Sep 07, 2019 Live Training
SANS Munich September 2019 Munich, Germany Sep 02 - Sep 07, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Rome September 2019 Rome, Italy Sep 16 - Sep 21, 2019 Live Training
SANS London September 2019 London, United Kingdom Sep 23 - Sep 28, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS Doha October 2019 Doha, Qatar Oct 12 - Oct 17, 2019 Live Training
SANS Seattle Fall 2019 Seattle, WA Oct 14 - Oct 19, 2019 Live Training
SANS Amsterdam October 2019 Amsterdam, Netherlands Oct 28 - Nov 02, 2019 Live Training
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Austin 2019 Austin, TX Nov 18 - Nov 23, 2019 Live Training
SANS Atlanta Fall 2019 Atlanta, GA Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Advanced Memory Forensics & Threat Detection
Training Event Location Dates Training Type
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS London June 2019 London, United Kingdom Jun 03 - Jun 08, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR526: Advanced Memory Forensics & Threat Detection Online Jul 27 - Aug 01, 2019 vLive!
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
Mentor Session - FOR572 San Francisco, CA May 07 - Jun 25, 2019 Mentor
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS Zurich June 2019 Zurich, Switzerland Jun 03 - Jun 08, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Cyber Defence Japan 2019 Tokyo, Japan Jul 01 - Jul 13, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
SANS San Francisco Summer 2019 San Francisco, CA Jul 22 - Jul 27, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Jul 27 - Aug 01, 2019 vLive!
SANS London August 2019 London, United Kingdom Aug 05 - Aug 10, 2019 Live Training
SANS Minneapolis 2019 Minneapolis, MN Aug 12 - Aug 17, 2019 Live Training
SANS Amsterdam August 2019 Amsterdam, Netherlands Aug 19 - Aug 24, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Raleigh 2019 Raleigh, NC Sep 16 - Sep 21, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Stockholm May 2019 Stockholm, Sweden May 13 - May 18, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Jul 16 - Aug 15, 2019 vLive!
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS Chicago 2019 Chicago, IL Aug 19 - Aug 24, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Dallas Fall 2019 Dallas, TX Sep 23 - Sep 28, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
Mentor Session AW - FOR585 Miami, FL Jun 05 - Jun 12, 2019 Mentor
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
Mentor Session - FOR585 Mexico City, Mexico Jun 15 - Jul 20, 2019 Mentor
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
SANS London July 2019 London, United Kingdom Jul 08 - Jul 13, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR585: Advanced Smartphone Forensics Online Jul 27 - Aug 01, 2019 vLive!
SANS Virginia Beach 2019 Virginia Beach, VA Aug 19 - Aug 30, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS Dallas Fall 2019 Dallas, TX Sep 23 - Sep 28, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS Paris December 2019 Paris, France Dec 02 - Dec 07, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Northern VA Spring- Reston 2019 Reston, VA May 19 - May 24, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Munich July 2019 Munich, Germany Jul 01 - Jul 06, 2019 Live Training
SANS Cyber Defence Singapore 2019 Singapore, Singapore Jul 08 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
DFIR Summit & Training 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jul 27 - Aug 01, 2019 vLive!
SANS New York City 2019 New York, NY Aug 25 - Aug 30, 2019 Live Training
SANS Canberra Spring 2019 Canberra, Australia Sep 02 - Sep 21, 2019 Live Training
SANS Network Security 2019 Las Vegas, NV Sep 09 - Sep 16, 2019 Live Training
SANS DFIR Prague 2019 Prague, Czech Republic Sep 30 - Oct 06, 2019 Summit
SANS Northern VA Fall- Reston 2019 Reston, VA Sep 30 - Oct 05, 2019 Live Training
Threat Hunting & Incident Response Summit & Training 2019 New Orleans, LA Sep 30 - Oct 07, 2019 Summit
SANS Baltimore Fall 2019 Baltimore, MD Oct 07 - Oct 12, 2019 Live Training
SANS DFIRCON Miami 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online