DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR408: Windows Forensic Analysis
Training Event Location Dates Training Type
Mentor Session FOR408 Dubai Dubai, United Arab Emirates Feb 20 - Mar 23, 2016 Mentor
SANS Philadelphia 2016 Philadelphia, PA Feb 29 - Mar 05, 2016 Live Training
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
SANS 2016 - FOR408: Windows Forensic Analysis Online Mar 14 - Mar 19, 2016 vLive!
SANS Secure Singapore 2016 Singapore, Singapore Mar 28 - Apr 09, 2016 Live Training
SANS Secure Europe 2016 Amsterdam, Netherlands Apr 04 - Apr 16, 2016 Live Training
SANS Atlanta 2016 Atlanta, GA Apr 04 - Apr 09, 2016 Live Training
Community SANS Paris FOR408 (in French) Paris, France Apr 18 - Apr 22, 2016 Community SANS
Community SANS Columbia FOR408 Columbia, MD Apr 18 - Apr 23, 2016 Community SANS
SANS Security West 2016 San Diego, CA Apr 29 - May 06, 2016 Live Training
SANS Baltimore Spring 2016 Baltimore, MD May 09 - May 14, 2016 Live Training
SANS Houston 2016 Houston, TX May 09 - May 14, 2016 Live Training
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR408: Windows Forensic Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Rocky Mountain 2016 Denver, CO Jul 11 - Jul 16, 2016 Live Training
Community SANS New York FOR408 New York, NY Jul 18 - Jul 23, 2016 Community SANS
SANS Boston 2016 Boston, MA Aug 01 - Aug 06, 2016 Live Training
Community SANS Paris FOR408 (in French) Paris, France Sep 19 - Sep 23, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS vLive - FOR408: Windows Forensic Analysis Online Oct 11 - Nov 17, 2016 vLive!
SANS Sydney 2016 Sydney, Australia Nov 07 - Nov 19, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics and Incident Response
Training Event Location Dates Training Type
Mentor Session FOR508 Lisbon Lisbon, Portugal Feb 16 - Apr 19, 2016 Mentor
SANS Southern California - Anaheim 2016 Anaheim, CA Feb 22 - Feb 27, 2016 Live Training
SANS Secure India 2016 Bangalore, India Feb 22 - Mar 05, 2016 Live Training
Anaheim 2016 - FOR508: Advanced Digital Forensics and Incident Response Online Feb 22 - Feb 27, 2016 vLive!
SANS London Spring 2016 London, United Kingdom Feb 29 - Mar 05, 2016 Live Training
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
SANS Northern Virginia - Reston 2016 Reston, VA Apr 04 - Apr 09, 2016 Live Training
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
SANS Copenhagen 2016 Copenhagen, Denmark Apr 25 - Apr 30, 2016 Live Training
SANS Security West 2016 San Diego, CA Apr 29 - May 06, 2016 Live Training
SANS vLive - FOR508: Advanced Digital Forensics and Incident Response Online May 10 - Jun 16, 2016 vLive!
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR508: Advanced Digital Forensics and Incident Response Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Salt Lake City 2016 Salt Lake City, UT Jun 27 - Jul 02, 2016 Live Training
SANS Cyber Defence Canberra 2016 Canberra, Australia Jun 27 - Jul 09, 2016 Live Training
SANS London Summer 2016 London, United Kingdom Jul 11 - Jul 16, 2016 Live Training
SANS Minneapolis 2016 Minneapolis, MN Jul 18 - Jul 23, 2016 Live Training
Community SANS Columbia FOR508 Columbia, Sep 26 - Oct 01, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS vLive - FOR508: Advanced Digital Forensics and Incident Response Online Oct 17 - Nov 23, 2016 vLive!
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
Community SANS Paris FOR508 (in French) Paris, France Nov 14 - Nov 18, 2016 Community SANS
Community SANS Madrid FOR508 (in Spanish) Madrid, Spain Nov 21 - Nov 26, 2016 Community SANS
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac Forensic Analysis
Training Event Location Dates Training Type
SANS Southern California - Anaheim 2016 Anaheim, CA Feb 22 - Feb 27, 2016 Live Training
SANS Security West 2016 San Diego, CA Apr 29 - May 06, 2016 Live Training
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR518: Mac Forensic Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
SANS London Spring 2016 London, United Kingdom Feb 29 - Mar 05, 2016 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics and Analysis
Training Event Location Dates Training Type
Virginia Tech - FOR572: Advanced Network Forensics and Analysis Online Mar 07 - Mar 12, 2016 vLive!
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
SANS Secure Europe 2016 Amsterdam, Netherlands Apr 04 - Apr 16, 2016 Live Training
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
SANS Security West 2016 San Diego, CA Apr 29 - May 06, 2016 Live Training
SANS Melbourne 2016 Melbourne, Australia May 16 - May 21, 2016 Live Training
Security Operations Center Summit & Training Crystal City, VA May 19 - May 26, 2016 Summit
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online May 23 - Jun 29, 2016 vLive!
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR572: Advanced Network Forensics and Analysis Online Jun 13 - Jun 18, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS London Summer 2016 London, United Kingdom Jul 11 - Jul 16, 2016 Live Training
SANS Boston 2016 Boston, MA Aug 01 - Aug 06, 2016 Live Training
Community SANS Columbia FOR572 Columbia, MD Aug 15 - Aug 20, 2016 Community SANS
Community SANS Paris FOR572 (in French) Paris, France Oct 03 - Oct 07, 2016 Community SANS
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SOS SANS October Singapore 2016 Singapore, Singapore Oct 24 - Nov 06, 2016 Live Training
SANS vLive - FOR572: Advanced Network Forensics and Analysis Online Nov 08 - Dec 15, 2016 vLive!
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
SANS Secure Singapore 2016 Singapore, Singapore Mar 28 - Apr 09, 2016 Live Training
SANS Northern Virginia - Reston 2016 Reston, VA Apr 04 - Apr 09, 2016 Live Training
Secure Singapore 2016 - FOR578: Cyber Threat Intelligence Online Apr 04 - Apr 08, 2016 vLive!
Threat Hunting and Incident Response Summit New Orleans, LA Apr 12 - Apr 19, 2016 Summit
SANS Baltimore Spring 2016 Baltimore, MD May 09 - May 14, 2016 Live Training
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANSFIRE 2016 - FOR578: Cyber Threat Intelligence Online Jun 13 - Jun 17, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS Rocky Mountain 2016 Denver, CO Jul 11 - Jul 16, 2016 Live Training
SANS London Summer 2016 London, United Kingdom Jul 11 - Jul 16, 2016 Live Training
Rocky Mountain 2016 - FOR578: Cyber Threat Intelligence Online Jul 11 - Jul 15, 2016 vLive!
SANS San Antonio 2016 San Antonio, TX Jul 18 - Jul 23, 2016 Live Training
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 07 - Nov 19, 2016 Live Training
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS Northern Virginia - McLean 2016 McLean, VA Feb 15 - Feb 20, 2016 Live Training
SANS Munich Winter 2016 Munich, Germany Feb 15 - Feb 20, 2016 Live Training
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
Community SANS Mountain View FOR585 - Google Mountain View, CA May 16 - May 21, 2016 Community SANS
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
SANS Northern Virginia - McLean 2016 McLean, VA Feb 15 - Feb 20, 2016 Live Training
SANS Munich Winter 2016 Munich, Germany Feb 15 - Feb 20, 2016 Live Training
SANS 2016 Orlando, FL Mar 12 - Mar 21, 2016 Live Training
Mentor Session FOR610 Budapest Budapest, Hungary Mar 21 - Jun 13, 2016 Mentor
SANS Secure Singapore 2016 Singapore, Singapore Mar 28 - Apr 09, 2016 Live Training
Mentor Session - FOR610 Columbus, OH Mar 31 - May 12, 2016 Mentor
SANS Northern Virginia - Reston 2016 Reston, VA Apr 04 - Apr 09, 2016 Live Training
SANS Stockholm 2016 Stockholm, Sweden May 09 - May 14, 2016 Live Training
Community SANS Paris FOR610 (in French) Paris, France May 23 - May 28, 2016 Community SANS
SANSFIRE 2016 Washington, DC Jun 11 - Jun 18, 2016 Live Training
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jun 21 - Jul 28, 2016 vLive!
Digital Forensics & Incident Response Summit Austin, TX Jun 23 - Jun 30, 2016 Summit
SANS DFIR Prague 2016 Prague, Czech Republic Oct 03 - Oct 15, 2016 Live Training
SANS Sydney 2016 Sydney, Australia Nov 07 - Nov 19, 2016 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online