DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
Mentor Session - FOR500 Tampa, FL Oct 06 - Nov 17, 2018 Mentor
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS London October 2018 London, United Kingdom Oct 15 - Oct 20, 2018 Live Training
Mentor Session AW - FOR500 Washington, DC Oct 22 - Oct 26, 2018 Mentor
SANS Houston 2018 Houston, TX Oct 29 - Nov 03, 2018 Live Training
SANS vLive - FOR500: Windows Forensic Analysis Online Oct 29 - Dec 19, 2018 vLive!
SANS Gulf Region 2018 Dubai, United Arab Emirates Nov 03 - Nov 15, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Rome 2018 Rome, Italy Nov 12 - Nov 17, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR500: Windows Forensic Analysis Online Dec 13 - Dec 18, 2018 vLive!
Mentor Session - FOR500 Phoenix, AZ Jan 11 - Feb 15, 2019 Mentor
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Anaheim 2019 Anaheim, CA Feb 11 - Feb 16, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Reno Tahoe 2019 Reno, NV Feb 25 - Mar 02, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS London April 2019 London, United Kingdom Apr 08 - Apr 13, 2019 Live Training
SANS Seattle Spring 2019 Seattle, WA Apr 14 - Apr 19, 2019 Live Training
SANS Pen Test Austin 2019 Austin, TX Apr 29 - May 04, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Milan May 2019 Milan, Italy May 13 - May 18, 2019 Live Training
SANS London June 2019 London, United Kingdom Jun 03 - Jun 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Northern VA Fall- Tysons 2018 McLean, VA Oct 13 - Oct 20, 2018 Live Training
SANS October Singapore 2018 Singapore, Singapore Oct 15 - Oct 27, 2018 Live Training
SANS Seattle Fall 2018 Seattle, WA Oct 15 - Oct 20, 2018 Live Training
Mentor Session - FOR508 Copenhagen, Denmark Oct 24 - Dec 08, 2018 Mentor
SANS Houston 2018 Houston, TX Oct 29 - Nov 03, 2018 Live Training
Houston 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Oct 29 - Nov 03, 2018 vLive!
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Osaka 2018 Osaka, Japan Nov 12 - Nov 17, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS November Singapore 2018 Singapore, Singapore Nov 19 - Nov 24, 2018 Live Training
SANS Nashville 2018 Nashville, TN Dec 03 - Dec 08, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
SANS Miami 2019 Miami, FL Jan 21 - Jan 26, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS Scottsdale 2019 Scottsdale, AZ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS Baltimore Spring 2019 Baltimore, MD Mar 02 - Mar 09, 2019 Live Training
SANS Secure India 2019 Bangalore, India Mar 04 - Mar 09, 2019 Live Training
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS London April 2019 London, United Kingdom Apr 08 - Apr 13, 2019 Live Training
SANS Boston Spring 2019 Boston, MA Apr 14 - Apr 19, 2019 Live Training
SANS Northern Virginia- Alexandria 2019 Alexandria, VA Apr 23 - Apr 28, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS Hong Kong 2019 HongKong, Hong Kong May 20 - May 25, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS October Singapore 2018 Singapore, Singapore Oct 15 - Oct 27, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS Austin 2018 Austin, TX Nov 26 - Dec 01, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Dublin May 2019 Dublin, Ireland May 13 - May 18, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Northern VA Fall- Tysons 2018 McLean, VA Oct 13 - Oct 20, 2018 Live Training
SANS London October 2018 London, United Kingdom Oct 15 - Oct 20, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS Reno Tahoe 2019 Reno, NV Feb 25 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Northern Virginia- Alexandria 2019 Alexandria, VA Apr 23 - Apr 28, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Milan May 2019 Milan, Italy May 13 - May 18, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Stockholm 2018 Stockholm, Sweden Nov 26 - Dec 01, 2018 Live Training
SANS Khobar 2018 Khobar, Kingdom Of Saudi Arabia Dec 01 - Dec 06, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR585: Advanced Smartphone Forensics Online Dec 13 - Dec 18, 2018 vLive!
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
SANS Dallas 2019 Dallas, TX Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Boston Spring 2019 Boston, MA Apr 14 - Apr 19, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Rome 2018 Rome, Italy Nov 12 - Nov 17, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jan 21 - Feb 27, 2019 vLive!
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 Vienna, VA Feb 11 - Feb 16, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Riyadh February 2019 Riyadh, Kingdom Of Saudi Arabia Feb 23 - Feb 28, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS Norfolk 2019 Norfolk, VA Mar 18 - Mar 23, 2019 Live Training
SANS Madrid March 2019 Madrid, Spain Mar 25 - Mar 30, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS Security West 2019 San Diego, CA May 09 - May 16, 2019 Live Training
SANS Amsterdam May 2019 Amsterdam, Netherlands May 20 - May 25, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online