DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS New York City Winter 2020 New York City, NY Feb 10 - Feb 15, 2020 Live Training
SANS San Diego 2020 San Diego, CA Feb 17 - Feb 22, 2020 Live Training
SANS St. Louis 2020 St. Louis, MO Mar 08 - Mar 13, 2020 Live Training
SANS Secure Singapore 2020 Singapore, Singapore Mar 16 - Mar 28, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Minneapolis 2020 Minneapolis, MN Apr 14 - Apr 19, 2020 Live Training
SANS Stockholm May 2020 Stockholm, Sweden May 25 - May 30, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR500: Windows Forensic Analysis Online Dec 12 - Dec 17, 2019 vLive!
SANS Miami 2020 Miami, FL Jan 13 - Jan 18, 2020 Live Training
Miami 2020 - FOR500: Windows Forensic Analysis Online Jan 13 - Jan 18, 2020 vLive!
SANS Tokyo January 2020 Tokyo, Japan Jan 20 - Jan 25, 2020 Live Training
Community SANS San Francisco FOR500 San Francisco, CA Jan 27 - Feb 01, 2020 Community SANS
Community SANS Columbia FOR500 @UKI Columbia, MD Jan 27 - Feb 01, 2020 Community SANS
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
SANS vLive - FOR500: Windows Forensic Analysis Online Feb 03 - Mar 18, 2020 vLive!
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS Scottsdale 2020 Scottsdale, AZ Feb 17 - Feb 22, 2020 Live Training
SANS Zurich February 2020 Zurich, Switzerland Feb 24 - Feb 29, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Northern VA - Reston Spring 2020 Reston, VA Mar 02 - Mar 07, 2020 Live Training
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS Dallas 2020 Dallas, TX Mar 09 - Mar 14, 2020 Live Training
Dallas 2020 - FOR500: Windows Forensic Analysis Online Mar 09 - Mar 14, 2020 vLive!
SANS Secure Singapore 2020 Singapore, Singapore Mar 16 - Mar 28, 2020 Live Training
SANS San Francisco Spring 2020 San Francisco, CA Mar 16 - Mar 27, 2020 Live Training
SANS Oslo March 2020 Oslo, Norway Mar 23 - Mar 28, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS London April 2020 London, United Kingdom Apr 20 - Apr 25, 2020 Live Training
SANS Baltimore Spring 2020 Baltimore, MD Apr 27 - May 02, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 18, 2020 Live Training
SANS Hong Kong 2020 Hong Kong, Hong Kong May 11 - May 16, 2020 Live Training
SANS Northern Virginia- Alexandria 2020 Alexandria, VA May 17 - May 22, 2020 Live Training
SANS Autumn Sydney 2020 Sydney, Australia May 18 - May 23, 2020 Live Training
SANS Dublin May 2020 Dublin, Ireland May 25 - May 30, 2020 Live Training
SANS Krakow May 2020 Krakow, Poland May 25 - May 30, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANS Chicago Spring 2020 Chicago, IL Jun 01 - Jun 06, 2020 Live Training
SANS Budapest June 2020 Budapest, Hungary Jun 08 - Jun 13, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS Pittsburgh 2020 Pittsburgh, PA Jun 22 - Jun 27, 2020 Live Training
SANS FOR500 Madrid October 2020 (In Spanish) Madrid, Spain Oct 19 - Oct 24, 2020 Live Training
SANS FOR500 Rome November 2020 (in Italian) Rome, Italy Nov 16 - Nov 21, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Austin 2019 Austin, TX Nov 18 - Nov 23, 2019 Live Training
SANS November Singapore 2019 Singapore, Singapore Nov 18 - Nov 23, 2019 Live Training
SANS Atlanta Fall 2019 Atlanta, GA Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Dec 12 - Dec 17, 2019 vLive!
SANS Austin Winter 2020 Austin, TX Jan 06 - Jan 11, 2020 Live Training
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS vLive - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Jan 21 - Feb 27, 2020 vLive!
SANS Vienna January 2020 Vienna, Austria Jan 27 - Feb 01, 2020 Live Training
SANS San Francisco East Bay 2020 Emeryville, CA Jan 27 - Feb 01, 2020 Live Training
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
Security East 2020 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Feb 03 - Feb 08, 2020 vLive!
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS New York City Winter 2020 New York City, NY Feb 10 - Feb 15, 2020 Live Training
SANS Brussels February 2020 Brussels, Belgium Feb 17 - Feb 22, 2020 Live Training
SANS Secure India 2020 Bangalore, India Feb 24 - Feb 29, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Secure Japan 2020 Tokyo, Japan Mar 02 - Mar 14, 2020 Live Training
SANS St. Louis 2020 St. Louis, MO Mar 08 - Mar 13, 2020 Live Training
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS Norfolk 2020 Norfolk, VA Mar 16 - Mar 21, 2020 Live Training
SANS Secure Canberra 2020 Canberra, Australia Mar 23 - Mar 28, 2020 Live Training
SANS Madrid March 2020 Madrid, Spain Mar 23 - Mar 28, 2020 Live Training
SANS Oslo March 2020 Oslo, Norway Mar 23 - Mar 28, 2020 Live Training
SANS Seattle Spring 2020 Seattle, WA Mar 23 - Mar 28, 2020 Live Training
SANS Abu Dhabi March 2020 Abu Dhabi, United Arab Emirates Mar 28 - Apr 02, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Bethesda 2020 Bethesda, MD Apr 14 - Apr 19, 2020 Live Training
SANS London April 2020 London, United Kingdom Apr 20 - Apr 25, 2020 Live Training
SANS Bucharest May 2020 Bucharest, Romania May 04 - May 09, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
Security West 2020 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online May 08 - May 13, 2020 vLive!
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 18, 2020 Live Training
Community SANS Scottsdale FOR508 Scottsdale, AZ May 11 - May 16, 2020 Community SANS
SANS San Antonio 2020 San Antonio, TX May 17 - May 22, 2020 Live Training
SANS Autumn Sydney 2020 Sydney, Australia May 18 - May 23, 2020 Live Training
SANS Krakow May 2020 Krakow, Poland May 25 - May 30, 2020 Live Training
SANS FOR508 Madrid May 2020 (In Spanish) Madrid, Spain May 25 - May 30, 2020 Live Training
SANS Atlanta Spring 2020 Atlanta, GA May 26 - May 31, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANS FOR508 Milan June 2020 (in Italian) Milan, Italy Jun 08 - Jun 13, 2020 Live Training
SANS New Orleans 2020 New Orleans, LA Jun 08 - Jun 13, 2020 Live Training
SANS Las Vegas Summer 2020 Las Vegas, NV Jun 08 - Jun 13, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS Zurich June 2020 Zurich, Switzerland Jun 15 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS San Francisco Spring 2020 San Francisco, CA Mar 16 - Mar 27, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
Security West 2020 - FOR518: Mac and iOS Forensic Analysis and Incident Response Online May 08 - May 13, 2020 vLive!
SANS Paris June 2020 Paris, France Jun 08 - Jun 13, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Advanced Memory Forensics & Threat Detection
Training Event Location Dates Training Type
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 18, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 12 - Dec 17, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
SANS Tokyo January 2020 Tokyo, Japan Jan 20 - Jan 25, 2020 Live Training
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
SANS Brussels February 2020 Brussels, Belgium Feb 17 - Feb 22, 2020 Live Training
SANS Scottsdale 2020 Scottsdale, AZ Feb 17 - Feb 22, 2020 Live Training
SANS Dallas 2020 Dallas, TX Mar 09 - Mar 14, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS Frankfurt March 2020 Frankfurt, Germany Mar 30 - Apr 04, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
Security West 2020 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online May 08 - May 13, 2020 vLive!
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 18, 2020 Live Training
SANS Stockholm May 2020 Stockholm, Sweden May 25 - May 30, 2020 Live Training
SANS Las Vegas Summer 2020 Las Vegas, NV Jun 08 - Jun 13, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS Northern VA - Arlington 2020 Arlington, VA Jul 06 - Jul 11, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR578: Cyber Threat Intelligence Online Dec 12 - Dec 16, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
Open-Source Intelligence Summit & Training 2020 Alexandria, VA Feb 18 - Feb 24, 2020 Summit
SANS vLive - FOR578: Cyber Threat Intelligence Online Feb 18 - Mar 26, 2020 vLive!
SANS St. Louis 2020 St. Louis, MO Mar 08 - Mar 13, 2020 Live Training
SANS Madrid March 2020 Madrid, Spain Mar 23 - Mar 28, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Brussels April 2020 Brussels, Belgium Apr 20 - Apr 25, 2020 Live Training
SANS Northern Virginia- Alexandria 2020 Alexandria, VA May 17 - May 22, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS Paris December 2019 Paris, France Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR585: Smartphone Forensic Analysis In-Depth Online Dec 12 - Dec 17, 2019 vLive!
SANS Anaheim 2020 Anaheim, CA Jan 20 - Jan 25, 2020 Live Training
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Northern VA - Reston Spring 2020 Reston, VA Mar 02 - Mar 07, 2020 Live Training
Northern VA - Reston Spring 2020 - FOR585: Smartphone Forensic Analysis In-Depth Online Mar 02 - Mar 07, 2020 vLive!
SANS Seattle Spring 2020 Seattle, WA Mar 23 - Mar 28, 2020 Live Training
SANS FOR585 Rome March 2020 (In Italian) Rome, Italy Mar 30 - Apr 04, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
Security West 2020 - FOR585: Smartphone Forensic Analysis In-Depth Online May 08 - May 13, 2020 vLive!
SANS Stockholm May 2020 Stockholm, Sweden May 25 - May 30, 2020 Live Training
SANS Paris June 2020 Paris, France Jun 08 - Jun 13, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 12 - Dec 17, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Northern VA - Fairfax 2020 Fairfax, VA Feb 10 - Feb 15, 2020 Live Training
SANS Dubai February 2020 Dubai, United Arab Emirates Feb 15 - Feb 20, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Secure Japan 2020 Tokyo, Japan Mar 02 - Mar 14, 2020 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Mar 09 - Apr 15, 2020 vLive!
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
Security West 2020 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online May 08 - May 13, 2020 vLive!
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 18, 2020 Live Training
SANS San Antonio 2020 San Antonio, TX May 17 - May 22, 2020 Live Training
SANSFIRE 2020 Washington, DC Jun 13 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online