DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR498: Battlefield Forensics & Data Acquisition
Training Event Location Dates Training Type
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Secure Singapore 2020 Singapore, Singapore Mar 16 - Mar 28, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS Minneapolis 2020 Minneapolis, MN Apr 14 - Apr 19, 2020 Live Training
SANS Stockholm May 2020 Stockholm, Sweden May 25 - May 30, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Santa Monica 2019 Santa Monica, CA Oct 21 - Oct 26, 2019 Live Training
SANS Houston 2019 Houston, TX Oct 28 - Nov 02, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
Community SANS Winnipeg FOR500 Winnipeg, MB Nov 04 - Nov 09, 2019 Community SANS
Mentor Session - FOR500 San Antonio, TX Nov 05 - Dec 17, 2019 Mentor
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
Community SANS San Jose FOR500 San Jose, CA Dec 09 - Dec 14, 2019 Community SANS
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR500: Windows Forensic Analysis Online Dec 12 - Dec 17, 2019 vLive!
SANS Miami 2020 Miami, FL Jan 13 - Jan 18, 2020 Live Training
Miami 2020 - FOR500: Windows Forensic Analysis Online Jan 13 - Jan 18, 2020 vLive!
SANS Tokyo January 2020 Tokyo, Japan Jan 20 - Jan 25, 2020 Live Training
Community SANS San Francisco FOR500 San Francisco, CA Jan 27 - Feb 01, 2020 Community SANS
Community SANS Columbia FOR500 @UKI Columbia, MD Jan 27 - Feb 01, 2020 Community SANS
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS Scottsdale 2020 Scottsdale, AZ Feb 17 - Feb 22, 2020 Live Training
SANS Zurich February 2020 Zurich, Switzerland Feb 24 - Feb 29, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Northern VA - Reston Spring 2020 Reston, VA Mar 02 - Mar 07, 2020 Live Training
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS Dallas 2020 Dallas, TX Mar 09 - Mar 14, 2020 Live Training
Dallas 2020 - FOR500: Windows Forensic Analysis Online Mar 09 - Mar 14, 2020 vLive!
SANS Secure Singapore 2020 Singapore, Singapore Mar 16 - Mar 28, 2020 Live Training
SANS San Francisco Spring 2020 San Francisco, CA Mar 16 - Mar 27, 2020 Live Training
SANS Oslo March 2020 Oslo, Norway Mar 23 - Mar 28, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Baltimore Spring 2020 Baltimore, MD Apr 27 - May 02, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 16, 2020 Live Training
SANS Northern Virginia- Alexandria 2020 Alexandria, VA May 17 - May 22, 2020 Live Training
SANS Dublin May 2020 Dublin, Ireland May 25 - May 30, 2020 Live Training
SANS Krakow May 2020 Krakow, Poland May 25 - May 30, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANS Chicago Spring 2020 Chicago, IL Jun 01 - Jun 06, 2020 Live Training
SANS Budapest June 2020 Budapest, Hungary Jun 08 - Jun 13, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Training Event Location Dates Training Type
Purple Team Summit & Training 2019 Las Colinas, TX Oct 21 - Oct 28, 2019 Summit
SANS Amsterdam October 2019 Amsterdam, Netherlands Oct 28 - Nov 02, 2019 Live Training
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Austin 2019 Austin, TX Nov 18 - Nov 23, 2019 Live Training
SANS November Singapore 2019 Singapore, Singapore Nov 18 - Nov 23, 2019 Live Training
SANS Atlanta Fall 2019 Atlanta, GA Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Dec 12 - Dec 17, 2019 vLive!
SANS Austin Winter 2020 Austin, TX Jan 06 - Jan 11, 2020 Live Training
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Vienna January 2020 Vienna, Austria Jan 27 - Feb 01, 2020 Live Training
SANS San Francisco East Bay 2020 Emeryville, CA Jan 27 - Feb 01, 2020 Live Training
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
Security East 2020 - FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics Online Feb 03 - Feb 08, 2020 vLive!
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS New York City Winter 2020 New York City, NY Feb 10 - Feb 15, 2020 Live Training
SANS Brussels February 2020 Brussels, Belgium Feb 17 - Feb 22, 2020 Live Training
Community SANS Scottsdale FOR508 Scottsdale, AZ Feb 24 - Feb 29, 2020 Community SANS
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS St. Louis 2020 St. Louis, MO Mar 08 - Mar 13, 2020 Live Training
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS Norfolk 2020 Norfolk, VA Mar 16 - Mar 21, 2020 Live Training
SANS Secure Canberra 2020 Canberra, Australia Mar 23 - Mar 28, 2020 Live Training
SANS Madrid March 2020 Madrid, Spain Mar 23 - Mar 28, 2020 Live Training
SANS Oslo March 2020 Oslo, Norway Mar 23 - Mar 28, 2020 Live Training
SANS Seattle Spring 2020 Seattle, WA Mar 23 - Mar 28, 2020 Live Training
SANS Abu Dhabi March 2020 Abu Dhabi, United Arab Emirates Mar 28 - Apr 02, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Bethesda 2020 Bethesda, MD Apr 14 - Apr 19, 2020 Live Training
SANS London April 2020 London, United Kingdom Apr 20 - Apr 25, 2020 Live Training
SANS Bucharest May 2020 Bucharest, Romania May 04 - May 09, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 16, 2020 Live Training
SANS San Antonio 2020 San Antonio, TX May 17 - May 22, 2020 Live Training
SANS Krakow May 2020 Krakow, Poland May 25 - May 30, 2020 Live Training
SANS Atlanta Spring 2020 Atlanta, GA May 26 - May 31, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANS FOR508 Milan June 2020 (in Italian) Milan, Italy Jun 08 - Jun 13, 2020 Live Training
SANS New Orleans 2020 New Orleans, LA Jun 08 - Jun 13, 2020 Live Training
SANS Las Vegas Spring 2020 Las Vegas, NV Jun 08 - Jun 13, 2020 Live Training
SANS Zurich June 2020 Zurich, Switzerland Jun 15 - Jun 20, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS San Francisco Spring 2020 San Francisco, CA Mar 16 - Mar 27, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Advanced Memory Forensics & Threat Detection
Training Event Location Dates Training Type
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Paris March 2020 Paris, France Mar 09 - Mar 14, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS London June 2020 London, United Kingdom Jun 01 - Jun 06, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS Paris November 2019 Paris, France Nov 04 - Nov 09, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 12 - Dec 17, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
SANS Tokyo January 2020 Tokyo, Japan Jan 20 - Jan 25, 2020 Live Training
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
SANS Brussels February 2020 Brussels, Belgium Feb 17 - Feb 22, 2020 Live Training
SANS Scottsdale 2020 Scottsdale, AZ Feb 17 - Feb 22, 2020 Live Training
SANS Dallas 2020 Dallas, TX Mar 09 - Mar 14, 2020 Live Training
Dallas 2020 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Mar 09 - Mar 14, 2020 vLive!
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS Frankfurt March 2020 Frankfurt, Germany Mar 30 - Apr 04, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 16, 2020 Live Training
SANS Las Vegas Spring 2020 Las Vegas, NV Jun 08 - Jun 13, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Sydney 2019 Sydney, Australia Nov 04 - Nov 23, 2019 Live Training
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS San Francisco Winter 2019 San Francisco, CA Dec 02 - Dec 07, 2019 Live Training
SANS Frankfurt December 2019 Frankfurt, Germany Dec 09 - Dec 14, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR578: Cyber Threat Intelligence Online Dec 12 - Dec 16, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
Open-Source Intelligence Summit & Training 2020 Alexandria, VA Feb 18 - Feb 24, 2020 Summit
SANS St. Louis 2020 St. Louis, MO Mar 08 - Mar 13, 2020 Live Training
SANS Madrid March 2020 Madrid, Spain Mar 23 - Mar 28, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Northern Virginia- Alexandria 2020 Alexandria, VA May 17 - May 22, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Smartphone Forensic Analysis In-Depth
Training Event Location Dates Training Type
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Munich November 2019 Munich, Germany Nov 18 - Nov 23, 2019 Live Training
SANS Paris December 2019 Paris, France Dec 02 - Dec 07, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR585: Smartphone Forensic Analysis In-Depth Online Dec 12 - Dec 17, 2019 vLive!
SANS Anaheim 2020 Anaheim, CA Jan 20 - Jan 25, 2020 Live Training
SANS Security East 2020 New Orleans, LA Feb 01 - Feb 08, 2020 Live Training
Security East 2020 - FOR585: Smartphone Forensic Analysis In-Depth Online Feb 03 - Feb 08, 2020 vLive!
SANS London February 2020 London, United Kingdom Feb 10 - Feb 15, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS Northern VA - Reston Spring 2020 Reston, VA Mar 02 - Mar 07, 2020 Live Training
SANS Seattle Spring 2020 Seattle, WA Mar 23 - Mar 28, 2020 Live Training
SANS FOR585 Rome March 2020 (In Italian) Rome, Italy Mar 30 - Apr 04, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Stockholm May 2020 Stockholm, Sweden May 25 - May 30, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS DFIRCON 2019 Coral Gables, FL Nov 04 - Nov 09, 2019 Live Training
SANS London November 2019 London, United Kingdom Nov 11 - Nov 16, 2019 Live Training
SANS Gulf Region 2019 Dubai, United Arab Emirates Nov 16 - Nov 28, 2019 Live Training
SANS Cyber Defense Initiative 2019 Washington, DC Dec 10 - Dec 17, 2019 Live Training
Cyber Defense Initiative 2019 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 12 - Dec 17, 2019 vLive!
SANS Threat Hunting & IR Europe Summit & Training 2020 London, United Kingdom Jan 13 - Jan 19, 2020 Summit
Cyber Threat Intelligence Summit & Training 2020 Arlington, VA Jan 20 - Jan 27, 2020 Summit
SANS Northern VA - Fairfax 2020 Fairfax, VA Feb 10 - Feb 15, 2020 Live Training
SANS Dubai February 2020 Dubai, United Arab Emirates Feb 15 - Feb 20, 2020 Live Training
SANS Munich March 2020 Munich, Germany Mar 02 - Mar 07, 2020 Live Training
SANS London March 2020 London, United Kingdom Mar 16 - Mar 21, 2020 Live Training
SANS 2020 Orlando, FL Apr 03 - Apr 10, 2020 Live Training
SANS London April 2020 London, United Kingdom Apr 20 - Apr 25, 2020 Live Training
SANS Security West 2020 San Diego, CA May 06 - May 13, 2020 Live Training
SANS Amsterdam May 2020 Amsterdam, Netherlands May 11 - May 16, 2020 Live Training
SANS San Antonio 2020 San Antonio, TX May 17 - May 22, 2020 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online