DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANSFIRE 2017 - FOR500: Windows Forensic Analysis Online Jul 24 - Jul 29, 2017 vLive!
Community SANS Columbia FOR500 Columbia, MO Jul 24 - Jul 29, 2017 Community SANS
SANS Boston 2017 Boston, MA Aug 07 - Aug 12, 2017 Live Training
SANS New York City 2017 New York City, NY Aug 14 - Aug 19, 2017 Live Training
SANS Salt Lake City 2017 Salt Lake City, UT Aug 14 - Aug 19, 2017 Live Training
Community SANS Columbia FOR500 Columbia, MD Aug 14 - Aug 19, 2017 Community SANS
SANS Adelaide 2017 Adelaide, Australia Aug 21 - Aug 26, 2017 Live Training
SANS Virginia Beach 2017 Virginia Beach, VA Aug 21 - Sep 01, 2017 Live Training
SANS Tampa - Clearwater 2017 Clearwater, FL Sep 05 - Sep 10, 2017 Live Training
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Network Security 2017 - FOR500: Windows Forensic Analysis Online Sep 10 - Sep 15, 2017 vLive!
SANS Baltimore Fall 2017 Baltimore, MD Sep 25 - Sep 30, 2017 Live Training
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS vLive - FOR500: Windows Forensic Analysis Online Oct 09 - Nov 15, 2017 vLive!
Mentor Session - FOR500 Austin, TX Oct 12 - Nov 09, 2017 Mentor
SANS Miami 2017 Miami, FL Nov 06 - Nov 11, 2017 Live Training
Community SANS Ottawa FOR500 Ottawa, ON Nov 20 - Nov 25, 2017 Community SANS
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SANS San Francisco Winter 2017 San Francisco, CA Nov 27 - Dec 02, 2017 Live Training
San Francisco Winter 2017 - FOR500: Windows Forensic Analysis Online Nov 27 - Dec 02, 2017 vLive!
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Northern Virginia Winter 2018 Reston, VA Jan 15 - Jan 20, 2018 Live Training
SANS Miami 2018 Miami, FL Jan 29 - Feb 03, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANS Cyber Defence Singapore 2017 Singapore, Singapore Jul 10 - Jul 15, 2017 Live Training
SANS Los Angeles - Long Beach 2017 Long Beach, CA Jul 10 - Jul 15, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANSFIRE 2017 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Jul 24 - Jul 29, 2017 vLive!
SANS Virginia Beach 2017 Virginia Beach, VA Aug 21 - Sep 01, 2017 Live Training
Community SANS Columbia FOR508 Columbia, MD Aug 21 - Aug 26, 2017 Community SANS
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Network Security 2017 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Sep 10 - Sep 15, 2017 vLive!
SANS Dublin 2017 Dublin, Ireland Sep 11 - Sep 16, 2017 Live Training
Data Breach Summit & Training Chicago, IL Sep 25 - Oct 02, 2017 Summit
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS October Singapore 2017 Singapore, Singapore Oct 09 - Oct 28, 2017 Live Training
SANS Tysons Corner Fall 2017 McLean, VA Oct 14 - Oct 21, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS vLive - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Oct 16 - Nov 22, 2017 vLive!
SANS Seattle 2017 Seattle, WA Oct 30 - Nov 04, 2017 Live Training
SANS Gulf Region 2017 Dubai, United Arab Emirates Nov 04 - Nov 16, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
SANS Paris November 2017 Paris, France Nov 13 - Nov 18, 2017 Live Training
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SANS Austin Winter 2017 Austin, TX Dec 04 - Dec 09, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
SANS Las Vegas 2018 Las Vegas, NV Jan 28 - Feb 02, 2018 Live Training
SANS Dallas 2018 Dallas, TX Feb 19 - Feb 24, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANS vLive - FOR526: Memory Forensics In-Depth Online Aug 01 - Sep 07, 2017 vLive!
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Network Security 2017 - FOR526: Memory Forensics In-Depth Online Sep 10 - Sep 15, 2017 vLive!
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANSFIRE 2017 - FOR572: Advanced Network Forensics and Analysis Online Jul 24 - Jul 29, 2017 vLive!
SANS Virginia Beach 2017 Virginia Beach, VA Aug 21 - Sep 01, 2017 Live Training
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS October Singapore 2017 Singapore, Singapore Oct 09 - Oct 28, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS Seattle 2017 Seattle, WA Oct 30 - Nov 04, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
SANS London November 2017 London, United Kingdom Nov 27 - Dec 02, 2017 Live Training
SIEM & Tactical Analytics Summit & Training Scottsdale, AZ Nov 28 - Dec 05, 2017 Summit
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Cyber Defense Initiative 2017 - FOR572: Advanced Network Forensics and Analysis Online Dec 14 - Dec 19, 2017 vLive!
SANS Southern California- Anaheim 2018 Anaheim, CA Feb 12 - Feb 17, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANSFIRE 2017 - FOR578: Cyber Threat Intelligence Online Jul 24 - Jul 28, 2017 vLive!
SANS San Antonio 2017 San Antonio, TX Aug 06 - Aug 11, 2017 Live Training
SANS Boston 2017 Boston, MA Aug 07 - Aug 12, 2017 Live Training
SANS Virginia Beach 2017 Virginia Beach, VA Aug 21 - Sep 01, 2017 Live Training
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Rocky Mountain Fall 2017 Denver, CO Sep 25 - Sep 30, 2017 Live Training
SANS Tysons Corner Fall 2017 McLean, VA Oct 14 - Oct 21, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Oct 16 - Nov 15, 2017 vLive!
SANS Miami 2017 Miami, FL Nov 06 - Nov 11, 2017 Live Training
SANS San Francisco Winter 2017 San Francisco, CA Nov 27 - Dec 02, 2017 Live Training
San Francisco Winter 2017 - FOR578: Cyber Threat Intelligence Online Nov 27 - Dec 01, 2017 vLive!
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
SANS Southern California- Anaheim 2018 Anaheim, CA Feb 12 - Feb 17, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS vLive - FOR585: Advanced Smartphone Forensics Online Jul 10 - Aug 16, 2017 vLive!
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANS Chicago 2017 Chicago, IL Aug 21 - Aug 26, 2017 Live Training
SANS San Francisco Fall 2017 San Francisco, CA Sep 05 - Sep 10, 2017 Live Training
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Network Security 2017 - FOR585: Advanced Smartphone Forensics Online Sep 10 - Sep 15, 2017 vLive!
SANS Berlin 2017 Berlin, Germany Oct 23 - Oct 28, 2017 Live Training
SANS Gulf Region 2017 Dubai, United Arab Emirates Nov 04 - Nov 16, 2017 Live Training
SANS Sydney 2017 Sydney, Australia Nov 13 - Nov 25, 2017 Live Training
Community SANS Madrid FOR585 (in Spanish) Madrid, Spain Nov 13 - Nov 18, 2017 Community SANS
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Dallas 2018 Dallas, TX Feb 19 - Feb 24, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS London July 2017 London, United Kingdom Jul 03 - Jul 08, 2017 Live Training
SANSFIRE 2017 Washington, DC Jul 22 - Jul 29, 2017 Live Training
SANS New York City 2017 New York City, NY Aug 14 - Aug 19, 2017 Live Training
SANS Virginia Beach 2017 Virginia Beach, VA Aug 21 - Sep 01, 2017 Live Training
SANS Network Security 2017 Las Vegas, NV Sep 10 - Sep 17, 2017 Live Training
Community SANS Ottawa FOR610 Ottawa, ON Sep 18 - Sep 23, 2017 Community SANS
SANS Copenhagen 2017 Copenhagen, Denmark Sep 25 - Sep 30, 2017 Live Training
SANS Baltimore Fall 2017 Baltimore, MD Sep 25 - Sep 30, 2017 Live Training
Baltimore Fall 2017 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Sep 25 - Sep 30, 2017 vLive!
SANS DFIR Summit Prague 2017 Prague, Czech Republic Oct 02 - Oct 08, 2017 Live Training
SANS Tokyo Autumn 2017 Tokyo, Japan Oct 16 - Oct 28, 2017 Live Training
SANS Paris November 2017 Paris, France Nov 13 - Nov 18, 2017 Live Training
SANS Cyber Defense Initiative 2017 Washington, DC Dec 12 - Dec 19, 2017 Live Training
SANS Security East 2018 New Orleans, LA Jan 08 - Jan 13, 2018 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online