DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Northern Virginia - Crystal City 2016 Crystal City, VA Sep 06 - Sep 11, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR408: Windows Forensic Analysis Online Sep 12 - Sep 17, 2016 vLive!
Community SANS Paris FOR408 (in French) Paris, France Sep 19 - Sep 23, 2016 Community SANS
SANS Seattle 2016 Seattle, WA Oct 03 - Oct 08, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS vLive - FOR408: Windows Forensic Analysis Online Oct 11 - Nov 17, 2016 vLive!
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
SANS Cologne Cologne, Germany Dec 05 - Dec 10, 2016 Live Training
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
SANS Frankfurt 2016 Frankfurt, Germany Dec 12 - Dec 17, 2016 Live Training
Cyber Defense Initiative 2016 - FOR408: Windows Forensic Analysis Online Dec 12 - Dec 17, 2016 vLive!
SANS Las Vegas 2017 Las Vegas, NV Jan 23 - Jan 30, 2017 Live Training
SANS Munich Winter 2017 Munich, Germany Feb 13 - Feb 18, 2017 Live Training
SANS Scottsdale 2017 Scottsdale, AZ Feb 20 - Feb 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics and Incident Response
Training Event Location Dates Training Type
SANS Brussels Autumn 2016 Brussels, Belgium Sep 05 - Sep 10, 2016 Live Training
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Community SANS Columbia FOR508 Columbia, MD Sep 26 - Oct 01, 2016 Community SANS
SANS vLive - FOR508: Advanced Digital Forensics and Incident Response Online Oct 03 - Nov 09, 2016 vLive!
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
Community SANS New York FOR508 New York, NY Oct 17 - Oct 22, 2016 Community SANS
SANS Tysons Corner 2016 Tysons Corner, VA Oct 22 - Oct 29, 2016 Live Training
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
SANS FOR508 Hamburg in German Hamburg, Germany Oct 24 - Oct 29, 2016 Live Training
SANS Miami 2016 Miami, FL Nov 07 - Nov 12, 2016 Live Training
SANS London 2016 London, United Kingdom Nov 12 - Nov 21, 2016 Live Training
Community SANS Paris FOR508 (in French) Paris, France Nov 14 - Nov 18, 2016 Community SANS
Community SANS Madrid FOR508 (in Spanish) Madrid, Spain Nov 21 - Nov 26, 2016 Community SANS
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
Cyber Defense Initiative 2016 - FOR508: Advanced Digital Forensics and Incident Response Online Dec 12 - Dec 17, 2016 vLive!
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
SANS Brussels Winter 2017 Brussels, Belgium Jan 16 - Jan 21, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS Southern California - Anaheim 2017 Anaheim, CA Feb 06 - Feb 11, 2017 Live Training
SANS Tysons Corner Spring 2017 McLean, VA Mar 20 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS San Francisco 2016 San Francisco, CA Nov 27 - Dec 02, 2016 Live Training
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR526: Memory Forensics In-Depth Online Sep 12 - Sep 17, 2016 vLive!
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Community SANS Paris FOR572 (in French) Paris, France Oct 03 - Oct 07, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Nov 08 - Dec 15, 2016 vLive!
SANS London 2016 London, United Kingdom Nov 12 - Nov 21, 2016 Live Training
SANS San Francisco 2016 San Francisco, CA Nov 27 - Dec 02, 2016 Live Training
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
SANS Las Vegas 2017 Las Vegas, NV Jan 23 - Jan 30, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS Munich Winter 2017 Munich, Germany Feb 13 - Feb 18, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR578: Cyber Threat Intelligence Online Sep 12 - Sep 16, 2016 vLive!
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
SANS San Francisco 2016 San Francisco, CA Nov 27 - Dec 02, 2016 Live Training
Community SANS Madrid FOR578 (in Spanish) Madrid, Spain Nov 28 - Dec 02, 2016 Community SANS
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
SANS Security East 2017 New Orleans, LA Jan 09 - Jan 14, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS London March 2017 London, United Kingdom Mar 13 - Mar 18, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
Network Security 2016 - FOR585: Advanced Smartphone Forensics Online Sep 12 - Sep 17, 2016 vLive!
Community SANS Madison FOR585 Madison, WI Sep 19 - Sep 24, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Baltimore 2016 Baltimore, MD Oct 10 - Oct 15, 2016 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Network Security 2016 Las Vegas, NV Sep 10 - Sep 19, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Tokyo Autumn 2016 Tokyo, Japan Oct 17 - Oct 29, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 03 - Nov 19, 2016 Live Training
SANS London 2016 London, United Kingdom Nov 12 - Nov 21, 2016 Live Training
SANS Hyderabad 2016 Hyderabad, India Nov 28 - Dec 10, 2016 Live Training
SANS Cyber Defense Initiative 2016 Washington, DC Dec 10 - Dec 17, 2016 Live Training
Cyber Defense Initiative 2016 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 12 - Dec 17, 2016 vLive!
SANS Brussels Winter 2017 Brussels, Belgium Jan 16 - Jan 21, 2017 Live Training
Cyber Threat Intelligence Summit & Training Arlington, VA Jan 25 - Feb 01, 2017 Summit
SANS London March 2017 London, United Kingdom Mar 13 - Mar 18, 2017 Live Training
SANS Tysons Corner Spring 2017 McLean, VA Mar 20 - Mar 25, 2017 Live Training
SANS 2017 Orlando, FL Apr 07 - Apr 14, 2017 Live Training
Threat Hunting and IR Summit New Orleans, LA Apr 18 - Apr 25, 2017 Summit
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online