DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR500: Windows Forensic Analysis Online Dec 13 - Dec 18, 2018 vLive!
Mentor Session - FOR500 Phoenix, AZ Jan 11 - Feb 15, 2019 Mentor
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
Mentor Session - FOR500 Kansas City, MO Feb 02 - Mar 09, 2019 Mentor
SANS Anaheim 2019 Anaheim, CA Feb 11 - Feb 16, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Reno Tahoe 2019 Reno, NV Feb 25 - Mar 02, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS Jeddah March 2019 Jeddah, Kingdom Of Saudi Arabia Mar 23 - Mar 28, 2019 Live Training
Community SANS Minneapolis FOR500 Minneapolis, MN Mar 25 - Mar 30, 2019 Community SANS
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS 2019 - FOR500: Windows Forensic Analysis Online Apr 01 - Apr 06, 2019 vLive!
SANS London April 2019 London, United Kingdom Apr 08 - Apr 13, 2019 Live Training
SANS Seattle Spring 2019 Seattle, WA Apr 14 - Apr 19, 2019 Live Training
SANS Pen Test Austin 2019 Austin, TX Apr 29 - May 04, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Milan May 2019 Milan, Italy May 13 - May 18, 2019 Live Training
SANS Stockholm May 2019 Stockholm, Sweden May 13 - May 18, 2019 Live Training
SANS Northern VA Spring- Reston 2019 Reston, VA May 19 - May 24, 2019 Live Training
SANS San Antonio 2019 San Antonio, TX May 28 - Jun 02, 2019 Live Training
SANS London June 2019 London, United Kingdom Jun 03 - Jun 08, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Pittsburgh 2019 Pittsburgh, PA Jul 08 - Jul 13, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS November Singapore 2018 Singapore, Singapore Nov 19 - Nov 24, 2018 Live Training
SANS Nashville 2018 Nashville, TN Dec 03 - Dec 08, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Mentor Session - FOR508 Copenhagen, Denmark Jan 16 - Mar 09, 2019 Mentor
SANS Miami 2019 Miami, FL Jan 21 - Jan 26, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS Scottsdale 2019 Scottsdale, AZ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS Baltimore Spring 2019 Baltimore, MD Mar 02 - Mar 09, 2019 Live Training
SANS Secure India 2019 Bangalore, India Mar 04 - Mar 09, 2019 Live Training
Mentor Session - FOR508 Richmond, VA Mar 06 - Apr 17, 2019 Mentor
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
San Francisco Spring 2019 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Mar 11 - Mar 16, 2019 vLive!
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS London April 2019 London, United Kingdom Apr 08 - Apr 13, 2019 Live Training
SANS Riyadh April 2019 Riyadh, Kingdom Of Saudi Arabia Apr 13 - Apr 18, 2019 Live Training
SANS Boston Spring 2019 Boston, MA Apr 14 - Apr 19, 2019 Live Training
SANS Northern Virginia- Alexandria 2019 Alexandria, VA Apr 23 - Apr 28, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS New Orleans 2019 New Orleans, LA May 19 - May 24, 2019 Live Training
SANS Hong Kong 2019 HongKong, Hong Kong May 20 - May 25, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANS Krakow May 2019 Krakow, Poland May 27 - Jun 01, 2019 Live Training
SANS Atlanta 2019 Atlanta, GA May 28 - Jun 02, 2019 Live Training
SANS Zurich June 2019 Zurich, Switzerland Jun 03 - Jun 08, 2019 Live Training
SANS Kansas City 2019 Kansas City, MO Jun 10 - Jun 15, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
SANS Rocky Mountain 2019 Denver, CO Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
San Francisco Spring 2019 - FOR518: Mac and iOS Forensic Analysis and Incident Response Online Mar 11 - Mar 16, 2019 vLive!
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Advanced Memory Forensics & Threat Detection
Training Event Location Dates Training Type
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS 2019 - FOR526: Memory Forensics In-Depth Online Apr 01 - Apr 06, 2019 vLive!
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS London June 2019 London, United Kingdom Jun 03 - Jun 08, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS Austin 2018 Austin, TX Nov 26 - Dec 01, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Riyadh February 2019 Riyadh, Kingdom Of Saudi Arabia Feb 23 - Feb 28, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Apr 01 - Apr 06, 2019 vLive!
SANS Cyber Security Middle East Summit Abu Dhabi, United Arab Emirates Apr 04 - Apr 11, 2019 Summit
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS Zurich June 2019 Zurich, Switzerland Jun 03 - Jun 08, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS vLive - FOR578: Cyber Threat Intelligence Online Feb 11 - Mar 20, 2019 vLive!
SANS Reno Tahoe 2019 Reno, NV Feb 25 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS 2019 - FOR578: Cyber Threat Intelligence Online Apr 01 - Apr 05, 2019 vLive!
SANS Northern Virginia- Alexandria 2019 Alexandria, VA Apr 23 - Apr 28, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Milan May 2019 Milan, Italy May 13 - May 18, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Paris July 2019 Paris, France Jul 01 - Jul 06, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS Stockholm 2018 Stockholm, Sweden Nov 26 - Dec 01, 2018 Live Training
SANS Khobar 2018 Khobar, Kingdom Of Saudi Arabia Dec 01 - Dec 06, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR585: Advanced Smartphone Forensics Online Dec 13 - Dec 18, 2018 vLive!
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
Mentor Session - FOR585 Tampa, FL Jan 24 - Mar 07, 2019 Mentor
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
Security East 2019 - FOR585: Advanced Smartphone Forensics Online Feb 04 - Feb 09, 2019 vLive!
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
SANS Dallas 2019 Dallas, TX Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS London April 2019 London, United Kingdom Apr 08 - Apr 13, 2019 Live Training
SANS Boston Spring 2019 Boston, MA Apr 14 - Apr 19, 2019 Live Training
Community SANS Madrid FOR585 (in Spanish) Madrid, Spain Apr 22 - Apr 27, 2019 Community SANS
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Cyber Defence Canberra 2019 Canberra, Australia Jun 24 - Jul 13, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jan 21 - Feb 27, 2019 vLive!
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
Community SANS Madrid FOR610 (in Spanish) Madrid, Spain Feb 11 - Feb 16, 2019 Community SANS
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS Norfolk 2019 Norfolk, VA Mar 18 - Mar 23, 2019 Live Training
SANS Madrid March 2019 Madrid, Spain Mar 25 - Mar 30, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Apr 01 - Apr 06, 2019 vLive!
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Northern VA Spring- Reston 2019 Reston, VA May 19 - May 24, 2019 Live Training
SANS Autumn Sydney 2019 Sydney, Australia May 20 - May 25, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANSFIRE 2019 Washington, DC Jun 15 - Jun 22, 2019 Live Training
SANS Columbia 2019 Columbia, MD Jul 15 - Jul 20, 2019 Live Training
DFIR Summit & Training 2019 Austin, TX Jul 25 - Aug 01, 2019 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online