DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR308: Digital Forensics Essentials
Training Event Location Dates Training Type
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS Virginia Beach: Virtual Edition 2021 , Aug 23 - Aug 28, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Canberra Spring 2021 Canberra, Australia Nov 08 - Nov 13, 2021 Live Training
SANS Canberra Spring 2021 - Live Online Virtual - Australian Eastern Daylight Time, Australia Nov 08 - Nov 13, 2021 TBD
SANS OnDemand Online Anytime Online
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
SANS Amsterdam June 2021 Virtual - Central European Summer Time, Netherlands Jun 07 - Jun 12, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
Cyber Defence Singapore July 2021 Singapore, Singapore Jul 12 - Jul 24, 2021 Live Training
Cyber Defence Singapore July 2021 - Live Online Singapore, Singapore Jul 12 - Jul 24, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Frankfurt December 2021 Virtual - Central European Time, Germany Dec 13 - Dec 18, 2021 TBD
SANS OnDemand Online Anytime Online
FOR498A: Forensic Data Acquisition
Training Event Location Dates Training Type
SANS Stay Sharp Summer 2021 , Jul 07 - Jul 09, 2021 TBD
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Stockholm May 2021 Virtual - Central European Summer Time, Sweden May 31 - Jun 05, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS FOR500 In Italian June 2021 Virtual - Central European Summer Time, Italy Jun 07 - Jun 12, 2021 TBD
SANS Amsterdam June 2021 Virtual - Central European Summer Time, Netherlands Jun 07 - Jun 12, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS Cyber Defence Japan 2021 Virtual - Japan Standard Time, Japan Jun 28 - Jul 10, 2021 TBD
SANS Amsterdam July 2021 Virtual - Central European Summer Time, Netherlands Jul 19 - Jul 24, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
Cyber Defence Singapore August 2021 Singapore, Singapore Aug 16 - Aug 21, 2021 Live Training
Cyber Defence Singapore August 2021 Virtual - Singapore Standard Time, Singapore Aug 16 - Aug 21, 2021 TBD
SANS San Antonio: Virtual Edition 2021 , Aug 16 - Aug 21, 2021 TBD
SANS London August 2021 Virtual - British Summer Time, United Kingdom Aug 23 - Aug 28, 2021 TBD
MPO/W Columbia CMiP FY21 (FOR500) 5-day format Columbia, MD Aug 23 - Aug 27, 2021 TBD
SANS Sydney 2021 Sydney, Australia Sep 06 - Sep 11, 2021 Live Training
SANS Sydney 2021 - Live Online Virtual - Australian Eastern Standard Time, Australia Sep 06 - Sep 11, 2021 TBD
Cyber Defence India September 2021 Virtual - India Standard Time, India Sep 20 - Oct 02, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS London November 2021 Virtual - Greenwich Mean Time, United Kingdom Nov 01 - Nov 06, 2021 TBD
SANS APAC ICS Summit & Training Singapore, Singapore Nov 01 - Nov 20, 2021 Live Training
SANS Gulf Region 2021 Virtual - Gulf Standard Time, United Arab Emirates Nov 13 - Nov 25, 2021 TBD
SANS APAC ICS Summit & Training - Live Online Virtual - Singapore Standard Time, Singapore Nov 15 - Nov 20, 2021 TBD
SANS Amsterdam November 2021 Virtual - Central European Time, Netherlands Nov 29 - Dec 04, 2021 TBD
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Stockholm May 2021 Virtual - Central European Summer Time, Sweden May 31 - Jun 05, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
State of Wisconsin-Dept of Admin (WI DOA) FOR508 Madison, WI Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
South By SE Asia PenTest 2021 Virtual - India Standard Time, India Jun 21 - Jun 26, 2021 TBD
SANS Cyber Defence Australia 2021 Canberra, Australia Jun 28 - Jul 10, 2021 Live Training
SANS Cyber Defence Japan 2021 Virtual - Japan Standard Time, Japan Jun 28 - Jul 10, 2021 TBD
SANS Cyber Defence Australia 2021 - Live Online Virtual - Austalian Eastern Standard Time, Australia Jun 28 - Jul 10, 2021 TBD
SANS Digital Forensics en Espanol: June 2021 , Jun 28 - Jul 03, 2021 TBD
SANS London July 2021 Virtual - British Summer Time, United Kingdom Jul 05 - Jul 10, 2021 TBD
SANSFIRE 2021 , Jul 12 - Jul 17, 2021 TBD
Cyber Defence Singapore July 2021 Singapore, Singapore Jul 12 - Jul 24, 2021 Live Training
Cyber Defence Singapore July 2021 - Live Online Singapore, Singapore Jul 12 - Jul 24, 2021 TBD
SANS Amsterdam July 2021 Virtual - Central European Summer Time, Netherlands Jul 19 - Jul 24, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
MPO/W Columbia CMiP FY21 (FOR508) 5-day format Columbia, MD Jul 26 - Jul 30, 2021 TBD
SANS Wellington August 2021 Wellington, New Zealand Aug 02 - Aug 07, 2021 Live Training
SANS Wellington August 2021 - Live Online Virtual - New Zealand Standard Time, New Zealand Aug 02 - Aug 07, 2021 TBD
SANS Prague August 2021 Virtual - Central European Summer Time, Czech Republic Aug 09 - Aug 14, 2021 TBD
Cyber Defence India August 2021 Virtual - India Standard Time, India Aug 09 - Aug 28, 2021 TBD
SANS NOVA: Virtual Edition 2021 , Aug 09 - Aug 14, 2021 TBD
SANS San Antonio: Virtual Edition 2021 , Aug 16 - Aug 21, 2021 TBD
SANS London August 2021 Virtual - British Summer Time, United Kingdom Aug 23 - Aug 28, 2021 TBD
SANS Virginia Beach: Virtual Edition 2021 , Aug 23 - Aug 28, 2021 TBD
SANS Amsterdam September 2021 Virtual - Central European Summer Time, Netherlands Sep 06 - Sep 14, 2021 TBD
Cyber Defence India September 2021 Virtual - India Standard Time, India Sep 20 - Oct 02, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Munich October 2021 Virtual - Central European Summer Time, Germany Oct 18 - Oct 23, 2021 TBD
SANS Tokyo Autumn 2021 Virtual - Japan Standard Time, Japan Oct 18 - Oct 30, 2021 TBD
SANS FOR508 In Italian October 2021 Virtual - Central European Summer Time, Italy Oct 18 - Oct 23, 2021 TBD
SANS London November 2021 Virtual - Greenwich Mean Time, United Kingdom Nov 01 - Nov 06, 2021 TBD
SANS APAC ICS Summit & Training Singapore, Singapore Nov 01 - Nov 20, 2021 Live Training
SANS Gulf Region 2021 Virtual - Gulf Standard Time, United Arab Emirates Nov 13 - Nov 25, 2021 TBD
South by SE Asia November 2021 Virtual - India Standard Time, India Nov 15 - Nov 20, 2021 TBD
SANS Paris November 2021 Virtual - Central European Time, France Nov 15 - Nov 20, 2021 TBD
SANS APAC ICS Summit & Training - Live Online Virtual - Singapore Standard Time, Singapore Nov 15 - Nov 20, 2021 TBD
SANS Amsterdam November 2021 Virtual - Central European Time, Netherlands Nov 29 - Dec 04, 2021 TBD
SANS Frankfurt December 2021 Virtual - Central European Time, Germany Dec 13 - Dec 18, 2021 TBD
SANS OnDemand Online Anytime Online
FOR509: Enterprise Cloud Forensics and Incident Response
Training Event Location Dates Training Type
CloudSecNext Summit & Training 2021 Virtual - US Eastern, Jun 01 - Jun 12, 2021 Summit
SANS London August 2021 Virtual - British Summer Time, United Kingdom Aug 23 - Aug 28, 2021 TBD
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS India October 2021 Virtual - India Standard Time, India Oct 18 - Oct 23, 2021 TBD
SANS Paris November 2021 Virtual - Central European Time, France Nov 15 - Nov 20, 2021 TBD
SANS Tokyo Winter 2021 Virtual - Japan Standard Time, Japan Nov 29 - Dec 11, 2021 TBD
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
Fort Gordon Cyber Protection Brigade (CPB/ARCYBER) (FOR572) Augusta, GA Jun 21 - Jun 26, 2021 TBD
Cyber Defence Singapore July 2021 Singapore, Singapore Jul 12 - Jul 24, 2021 Live Training
Cyber Defence Singapore July 2021 - Live Online Singapore, Singapore Jul 12 - Jul 24, 2021 TBD
SANS Amsterdam July 2021 Virtual - Central European Summer Time, Netherlands Jul 19 - Jul 24, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS San Antonio: Virtual Edition 2021 , Aug 16 - Aug 21, 2021 TBD
SANS London August 2021 Virtual - British Summer Time, United Kingdom Aug 23 - Aug 28, 2021 TBD
SANS Sydney 2021 Sydney, Australia Sep 06 - Sep 11, 2021 Live Training
SANS Sydney 2021 - Live Online Virtual - Australian Eastern Standard Time, Australia Sep 06 - Sep 11, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
State of Wisconsin-Dept of Admin (WI DOA) FOR572 Madison, WI Oct 04 - Oct 09, 2021 TBD
SANS Tokyo Autumn 2021 Virtual - Japan Standard Time, Japan Oct 18 - Oct 30, 2021 TBD
SANS Amsterdam November 2021 Virtual - Central European Time, Netherlands Nov 29 - Dec 04, 2021 TBD
SANS OnDemand Online Anytime Online
FOR572A: Lethal Network Forensics
Training Event Location Dates Training Type
SANS Stay Sharp Summer 2021 , Jul 07 - Jul 09, 2021 TBD
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Amsterdam May 2021 Virtual - Central European Summer Time, Netherlands May 17 - May 22, 2021 TBD
SANS Miami: Virtual Edition 2021 , Jun 21 - Jun 26, 2021 TBD
SANS London July 2021 Virtual - British Summer Time, United Kingdom Jul 05 - Jul 10, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
Cyber Defence Singapore August 2021 Singapore, Singapore Aug 16 - Aug 21, 2021 Live Training
Cyber Defence Singapore August 2021 Virtual - Singapore Standard Time, Singapore Aug 16 - Aug 21, 2021 TBD
SANS Amsterdam September 2021 Virtual - Central European Summer Time, Netherlands Sep 06 - Sep 14, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Paris November 2021 Virtual - Central European Time, France Nov 15 - Nov 20, 2021 TBD
SANS FOR578 (In Spanish) November 2021 Virtual - Central European Time, Spain Nov 29 - Dec 04, 2021 TBD
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS Amsterdam July 2021 Virtual - Central European Summer Time, Netherlands Jul 19 - Jul 24, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS Virginia Beach: Virtual Edition 2021 , Aug 23 - Aug 28, 2021 TBD
SANS Sydney 2021 Sydney, Australia Sep 06 - Sep 11, 2021 Live Training
SANS Sydney 2021 - Live Online Virtual - Australian Eastern Standard Time, Australia Sep 06 - Sep 11, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS Paris November 2021 Virtual - Central European Time, France Nov 15 - Nov 20, 2021 TBD
SANS OnDemand Online Anytime Online
FOR585A: iOS Forensic Analysis
Training Event Location Dates Training Type
SANS Stay Sharp Summer 2021 , Jul 07 - Jul 09, 2021 TBD
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Cyber Security Central: June 2021 , Jun 07 - Jun 12, 2021 TBD
SANS Paris June 2021 Virtual - Central European Summer Time, France Jun 14 - Jun 19, 2021 TBD
MPO/W Columbia CNODP FY21 (FOR610) 6-day format Columbia, MD Jun 14 - Jun 19, 2021 TBD
SANS Cyber Defence Japan 2021 Virtual - Japan Standard Time, Japan Jun 28 - Jul 10, 2021 TBD
DFIR Summit & Training 2021 Virtual - US Eastern, Jul 22 - Jul 31, 2021 Summit
SANS San Antonio: Virtual Edition 2021 , Aug 16 - Aug 21, 2021 TBD
SANS London August 2021 Virtual - British Summer Time, United Kingdom Aug 23 - Aug 28, 2021 TBD
Fort Gordon Cyber Protection Brigade (CPB/ARCYBER) Augusta, GA Aug 23 - Aug 28, 2021 TBD
SANS Sydney 2021 Sydney, Australia Sep 06 - Sep 11, 2021 Live Training
SANS Sydney 2021 - Live Online Virtual - Australian Eastern Standard Time, Australia Sep 06 - Sep 11, 2021 TBD
Cyber Defence India September 2021 Virtual - India Standard Time, India Sep 20 - Oct 02, 2021 TBD
SANS In French September 2021 Virtual - Central European Summer Time, France Sep 27 - Oct 02, 2021 TBD
SANS DFIR Europe 2021 Virtual - Central European Summer Time, Czech Republic Oct 04 - Oct 09, 2021 TBD
SANS October Singapore 2021 Singapore, Singapore Oct 11 - Oct 23, 2021 Live Training
SANS October Singapore 2021 - Live Online Virtual - Singapore Standard Time, Singapore Oct 11 - Oct 23, 2021 TBD
SANS Tokyo Autumn 2021 Virtual - Japan Standard Time, Japan Oct 18 - Oct 30, 2021 TBD
SANS Amsterdam November 2021 Virtual - Central European Time, Netherlands Nov 29 - Dec 04, 2021 TBD
SANS OnDemand Online Anytime Online
FOR610A: Introduction to Malware Analysis: Hands-on and Technical
Training Event Location Dates Training Type
SANS Stay Sharp Summer 2021 , Jul 07 - Jul 09, 2021 TBD