DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Baltimore Fall 2017 Baltimore, MD Sep 25 - Sep 30, 2017 Live Training
Mentor Session - FOR500 Daytona Beach, FL Sep 28 - Nov 09, 2017 Mentor
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
SANS vLive - FOR500: Windows Forensic Analysis Online Oct 09 - Nov 15, 2017 vLive!
Mentor Session - FOR500 Austin, TX Oct 12 - Nov 09, 2017 Mentor
SANS Miami 2017 Miami, FL Nov 06 - Nov 11, 2017 Live Training
Community SANS Ottawa FOR500 Ottawa, ON Nov 20 - Nov 25, 2017 Community SANS
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SANS San Francisco Winter 2017 San Francisco, CA Nov 27 - Dec 02, 2017 Live Training
San Francisco Winter 2017 - FOR500: Windows Forensic Analysis Online Nov 27 - Dec 02, 2017 vLive!
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
Northern VA Winter - Reston 2018 Reston, VA Jan 15 - Jan 20, 2018 Live Training
SANS Amsterdam January 2018 Amsterdam, Netherlands Jan 15 - Jan 20, 2018 Live Training
SANS Miami 2018 Miami, FL Jan 29 - Feb 03, 2018 Live Training
SANS Secure Japan 2018 Tokyo, Japan Feb 19 - Mar 03, 2018 Live Training
SANS Secure Singapore 2018 Singapore, Singapore Mar 12 - Mar 24, 2018 Live Training
SANS Pen Test Austin 2018 Austin, TX Mar 19 - Mar 24, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
SANS Baltimore Spring 2018 Baltimore, MD Apr 21 - Apr 28, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
Data Breach Summit & Training Chicago, IL Sep 25 - Oct 02, 2017 Summit
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
SANS October Singapore 2017 Singapore, Singapore Oct 09 - Oct 28, 2017 Live Training
SANS Tysons Corner Fall 2017 McLean, VA Oct 14 - Oct 21, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS vLive - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Oct 16 - Nov 22, 2017 vLive!
Mentor Session - FOR508 Brasilia, Brazil Oct 18 - Oct 21, 2017 Mentor
SANS Berlin 2017 Berlin, Germany Oct 23 - Oct 28, 2017 Live Training
SANS Seattle 2017 Seattle, WA Oct 30 - Nov 04, 2017 Live Training
SANS Gulf Region 2017 Dubai, United Arab Emirates Nov 04 - Nov 16, 2017 Live Training
SANS Milan November 2017 Milan, Italy Nov 06 - Nov 11, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
SANS Paris November 2017 Paris, France Nov 13 - Nov 18, 2017 Live Training
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SANS Austin Winter 2017 Austin, TX Dec 04 - Dec 09, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
SANS Las Vegas 2018 Las Vegas, NV Jan 28 - Feb 02, 2018 Live Training
Las Vegas 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Jan 28 - Feb 02, 2018 vLive!
Cyber Threat Intelligence Summit & Training 2018 Bethesda, MD Jan 29 - Feb 05, 2018 Summit
SANS Secure India 2018 Bangalore, India Feb 12 - Feb 17, 2018 Live Training
SANS Secure Japan 2018 Tokyo, Japan Feb 19 - Mar 03, 2018 Live Training
SANS Dallas 2018 Dallas, TX Feb 19 - Feb 24, 2018 Live Training
SANS New York City Winter 2018 New York, NY Feb 26 - Mar 03, 2018 Live Training
SANS San Francisco Spring 2018 San Francisco, CA Mar 12 - Mar 17, 2018 Live Training
San Francisco Spring 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Mar 12 - Mar 17, 2018 vLive!
SANS Secure Canberra 2018 Canberra, Australia Mar 19 - Mar 24, 2018 Live Training
SANS Boston Spring 2018 Boston, MA Mar 25 - Mar 30, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
SANS London February 2018 London, United Kingdom Feb 05 - Feb 10, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
Mentor Session - AW FOR526 Columbia, SC Dec 04 - Dec 08, 2017 Mentor
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Amsterdam January 2018 Amsterdam, Netherlands Jan 15 - Jan 20, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
SANS October Singapore 2017 Singapore, Singapore Oct 09 - Oct 28, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS Seattle 2017 Seattle, WA Oct 30 - Nov 04, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SIEM & Tactical Analytics Summit & Training Scottsdale, AZ Nov 28 - Dec 05, 2017 Summit
SANS Munich December 2017 Munich, Germany Dec 04 - Dec 09, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Cyber Defense Initiative 2017 - FOR572: Advanced Network Forensics and Analysis Online Dec 14 - Dec 19, 2017 vLive!
Cyber Threat Intelligence Summit & Training 2018 Bethesda, MD Jan 29 - Feb 05, 2018 Summit
SANS Southern California- Anaheim 2018 Anaheim, CA Feb 12 - Feb 17, 2018 Live Training
Southern California- Anaheim 2018 - FOR572: Advanced Network Forensics and Analysis Online Feb 12 - Feb 17, 2018 vLive!
SANS Northern VA Spring - Tysons 2018 Tysons, VA Mar 17 - Mar 24, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
SANS Seattle Spring 2018 Seattle, WA Apr 23 - Apr 28, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
Rocky Mountain Fall 2017 Denver, CO Sep 25 - Sep 30, 2017 Live Training
SANS Tysons Corner Fall 2017 McLean, VA Oct 14 - Oct 21, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Oct 16 - Nov 15, 2017 vLive!
SANS Gulf Region 2017 Dubai, United Arab Emirates Nov 04 - Nov 16, 2017 Live Training
SANS Miami 2017 Miami, FL Nov 06 - Nov 11, 2017 Live Training
SANS San Francisco Winter 2017 San Francisco, CA Nov 27 - Dec 02, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2018 Bethesda, MD Jan 29 - Feb 05, 2018 Summit
SANS Southern California- Anaheim 2018 Anaheim, CA Feb 12 - Feb 17, 2018 Live Training
Southern California- Anaheim 2018 - FOR578: Cyber Threat Intelligence Online Feb 12 - Feb 16, 2018 vLive!
SANS Secure Singapore 2018 Singapore, Singapore Mar 12 - Mar 24, 2018 Live Training
SANS Pen Test Austin 2018 Austin, TX Mar 19 - Mar 24, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS Berlin 2017 Berlin, Germany Oct 23 - Oct 28, 2017 Live Training
SANS Gulf Region 2017 Dubai, United Arab Emirates Nov 04 - Nov 16, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
Community SANS Madrid FOR585 (in Spanish) Madrid, Spain Nov 13 - Nov 18, 2017 Community SANS
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
Cyber Threat Intelligence Summit & Training 2018 Bethesda, MD Jan 29 - Feb 05, 2018 Summit
SANS London February 2018 London, United Kingdom Feb 05 - Feb 10, 2018 Live Training
SANS Dallas 2018 Dallas, TX Feb 19 - Feb 24, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Copenhagen 2017 Copenhagen, Denmark Sep 25 - Sep 30, 2017 Live Training
SANS Baltimore Fall 2017 Baltimore, MD Sep 25 - Sep 30, 2017 Live Training
Baltimore Fall 2017 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Sep 25 - Sep 30, 2017 vLive!
SANS DFIR Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Summit
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS Paris November 2017 Paris, France Nov 13 - Nov 18, 2017 Live Training
Community SANS Ottawa FOR610 Ottawa, ON Dec 04 - Dec 09, 2017 Community SANS
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2018 Bethesda, MD Jan 29 - Feb 05, 2018 Summit
SANS Secure Singapore 2018 Singapore, Singapore Mar 12 - Mar 24, 2018 Live Training
SANS Secure Canberra 2018 Canberra, Australia Mar 19 - Mar 24, 2018 Live Training
SANS 2018 Orlando, FL Apr 03 - Apr 10, 2018 Live Training
DFIR Summit & Training 2018 Austin, TX Jun 07 - Jun 14, 2018 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online