DFIR Training & Courses

DFIR Training & Courses

SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.

Online options available. Train from any location.
FOR500: Windows Forensic Analysis
Training Event Location Dates Training Type
SANS Virginia Beach 2018 Virginia Beach, VA Aug 20 - Aug 31, 2018 Live Training
SANS Copenhagen August 2018 Copenhagen, Denmark Aug 27 - Sep 01, 2018 Live Training
SANS Tampa-Clearwater 2018 Tampa, FL Sep 04 - Sep 09, 2018 Live Training
SANS Baltimore Fall 2018 Baltimore, MD Sep 08 - Sep 15, 2018 Live Training
SANS London September 2018 London, United Kingdom Sep 17 - Sep 22, 2018 Live Training
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
Network Security 2018 - FOR500: Windows Forensic Analysis Online Sep 23 - Sep 28, 2018 vLive!
Mentor Session - FOR500 Phoenix, AZ Sep 28 - Nov 02, 2018 Mentor
Mentor Session - FOR500 Atlanta, GA Sep 29 - Oct 27, 2018 Mentor
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
Mentor Session - FOR500 Tampa, FL Oct 06 - Nov 17, 2018 Mentor
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS London October 2018 London, United Kingdom Oct 15 - Oct 20, 2018 Live Training
Mentor Session AW - FOR500 Washington, DC Oct 22 - Oct 26, 2018 Mentor
SANS Houston 2018 Houston, TX Oct 29 - Nov 03, 2018 Live Training
SANS vLive - FOR500: Windows Forensic Analysis Online Oct 29 - Dec 19, 2018 vLive!
SANS Gulf Region 2018 Dubai, United Arab Emirates Nov 03 - Nov 15, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Rome 2018 Rome, Italy Nov 12 - Nov 17, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR500: Windows Forensic Analysis Online Dec 13 - Dec 18, 2018 vLive!
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Anaheim 2019 Anaheim, CA Feb 11 - Feb 16, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
Training Event Location Dates Training Type
SANS Virginia Beach 2018 Virginia Beach, VA Aug 20 - Aug 31, 2018 Live Training
SANS Chicago 2018 Chicago, IL Aug 20 - Aug 25, 2018 Live Training
Data Breach Summit & Training 2018 New York City, NY Aug 20 - Aug 27, 2018 Summit
SANS Tokyo Autumn 2018 Tokyo, Japan Sep 03 - Sep 15, 2018 Live Training
SANS Amsterdam September 2018 Amsterdam, Netherlands Sep 03 - Sep 08, 2018 Live Training
Threat Hunting & Incident Response Summit & Training 2018 New Orleans, LA Sep 06 - Sep 13, 2018 Summit
Threat Hunting & IR Summit - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Sep 08 - Sep 13, 2018 vLive!
SANS Munich September 2018 Munich, Germany Sep 16 - Sep 22, 2018 Live Training
Community SANS Columbia FOR508 Columbia, MD Sep 17 - Sep 22, 2018 Community SANS
Community SANS Madrid FOR508 (in Spanish) Madrid, Spain Sep 17 - Sep 22, 2018 Community SANS
Community SANS Toronto FOR508 Toronto, ON Sep 17 - Sep 22, 2018 Community SANS
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Northern VA Fall- Tysons 2018 Tysons, VA Oct 13 - Oct 20, 2018 Live Training
SANS October Singapore 2018 Singapore, Singapore Oct 15 - Oct 27, 2018 Live Training
SANS Seattle Fall 2018 Seattle, WA Oct 15 - Oct 20, 2018 Live Training
Mentor Session - FOR508 Copenhagen, Denmark Oct 24 - Dec 08, 2018 Mentor
SANS Houston 2018 Houston, TX Oct 29 - Nov 03, 2018 Live Training
Houston 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Oct 29 - Nov 03, 2018 vLive!
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Osaka 2018 Osaka, Japan Nov 12 - Nov 17, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS Nashville 2018 Nashville, TN Dec 03 - Dec 08, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
SANS Miami 2019 Miami, FL Jan 21 - Jan 26, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 McLean, VA Feb 11 - Feb 16, 2019 Live Training
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS Scottsdale 2019 Scottsdale, AZ Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS Baltimore Spring 2019 Baltimore, MD Mar 02 - Mar 09, 2019 Live Training
SANS Secure India 2019 Bangalore, India Mar 04 - Mar 09, 2019 Live Training
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS Munich March 2019 Munich, Germany Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR518: Mac and iOS Forensic Analysis and Incident Response
Training Event Location Dates Training Type
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
Community SANS Menlo Park FOR518 @ Facebook Menlo Park, CA Dec 03 - Dec 08, 2018 Community SANS
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS San Francisco Spring 2019 San Francisco, CA Mar 11 - Mar 16, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR526: Memory Forensics In-Depth
Training Event Location Dates Training Type
Threat Hunting & Incident Response Summit & Training 2018 New Orleans, LA Sep 06 - Sep 13, 2018 Summit
Threat Hunting & IR Summit - FOR526: Memory Forensics In-Depth Online Sep 08 - Sep 13, 2018 vLive!
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS vLive - FOR526: Memory Forensics In-Depth Online Oct 09 - Nov 15, 2018 vLive!
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London March 2019 London, United Kingdom Mar 11 - Mar 16, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS OnDemand Online Anytime Online
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident<br /> Response
Training Event Location Dates Training Type
SANS Virginia Beach 2018 Virginia Beach, VA Aug 20 - Aug 31, 2018 Live Training
SANS Copenhagen August 2018 Copenhagen, Denmark Aug 27 - Sep 01, 2018 Live Training
Threat Hunting & Incident Response Summit & Training 2018 New Orleans, LA Sep 06 - Sep 13, 2018 Summit
Threat Hunting & IR Summit - FOR572: Advanced Network Forensics and Analysis Online Sep 08 - Sep 13, 2018 vLive!
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS October Singapore 2018 Singapore, Singapore Oct 15 - Oct 27, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS Austin 2018 Austin, TX Nov 26 - Dec 01, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Frankfurt 2018 Frankfurt, Germany Dec 10 - Dec 15, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS New York Metro Winter 2019 Jersey City, NJ Feb 18 - Feb 23, 2019 Live Training
SANS Brussels February 2019 Brussels, Belgium Feb 25 - Mar 02, 2019 Live Training
SANS St. Louis 2019 St. Louis, MO Mar 11 - Mar 16, 2019 Live Training
SANS Secure Canberra 2019 Canberra, Australia Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR578: Cyber Threat Intelligence
Training Event Location Dates Training Type
SANS Amsterdam September 2018 Amsterdam, Netherlands Sep 03 - Sep 08, 2018 Live Training
Threat Hunting & Incident Response Summit & Training 2018 New Orleans, LA Sep 06 - Sep 13, 2018 Summit
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
SANS Northern VA Fall- Tysons 2018 Tysons, VA Oct 13 - Oct 20, 2018 Live Training
SANS London October 2018 London, United Kingdom Oct 15 - Oct 20, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS London February 2019 London, United Kingdom Feb 11 - Feb 16, 2019 Live Training
SANS Reno Tahoe 2019 Reno, NV Feb 25 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR585: Advanced Smartphone Forensics
Training Event Location Dates Training Type
SANS vLive - FOR585: Advanced Smartphone Forensics Online Sep 04 - Oct 11, 2018 vLive!
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
Network Security 2018 - FOR585: Advanced Smartphone Forensics Online Sep 23 - Sep 28, 2018 vLive!
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Stockholm 2018 Stockholm, Sweden Nov 26 - Dec 01, 2018 Live Training
SANS Khobar 2018 Khobar, Kingdom Of Saudi Arabia Dec 01 - Dec 06, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR585: Advanced Smartphone Forensics Online Dec 13 - Dec 18, 2018 vLive!
SANS Amsterdam January 2019 Amsterdam, Netherlands Jan 14 - Jan 19, 2019 Live Training
SANS Northern VA Spring- Tysons 2019 McLean, VA Feb 11 - Feb 16, 2019 Live Training
SANS Dallas 2019 Dallas, TX Feb 18 - Feb 23, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Training Event Location Dates Training Type
Community SANS Columbia FOR610 Columbia, MD Aug 20 - Aug 25, 2018 Community SANS
SANS San Francisco Summer 2018 San Francisco, CA Aug 26 - Aug 31, 2018 Live Training
SANS Tokyo Autumn 2018 Tokyo, Japan Sep 03 - Sep 15, 2018 Live Training
Threat Hunting & Incident Response Summit & Training 2018 New Orleans, LA Sep 06 - Sep 13, 2018 Summit
SANS Baltimore Fall 2018 Baltimore, MD Sep 08 - Sep 15, 2018 Live Training
SANS Network Security 2018 Las Vegas, NV Sep 23 - Sep 30, 2018 Live Training
Network Security 2018 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Sep 23 - Sep 28, 2018 vLive!
SANS DFIR Prague Summit & Training 2018 Prague, Czech Republic Oct 01 - Oct 07, 2018 Summit
SANS Denver 2018 Denver, CO Oct 15 - Oct 20, 2018 Live Training
SANS Sydney 2018 Sydney, Australia Nov 05 - Nov 17, 2018 Live Training
SANS DFIRCON Miami 2018 Miami, FL Nov 05 - Nov 10, 2018 Live Training
SANS Rome 2018 Rome, Italy Nov 12 - Nov 17, 2018 Live Training
SANS Paris November 2018 Paris, France Nov 19 - Nov 24, 2018 Live Training
SANS San Francisco Fall 2018 San Francisco, CA Nov 26 - Dec 01, 2018 Live Training
SANS Cyber Defense Initiative 2018 Washington, DC Dec 11 - Dec 18, 2018 Live Training
Cyber Defense Initiative 2018 - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Dec 13 - Dec 18, 2018 vLive!
SANS Threat Hunting London 2019 London, United Kingdom Jan 14 - Jan 19, 2019 Live Training
Cyber Threat Intelligence Summit & Training 2019 Arlington, VA Jan 21 - Jan 28, 2019 Summit
SANS vLive - FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques Online Jan 21 - Feb 27, 2019 vLive!
SANS Security East 2019 New Orleans, LA Feb 02 - Feb 09, 2019 Live Training
SANS Secure Japan 2019 Tokyo, Japan Feb 18 - Mar 02, 2019 Live Training
SANS Secure Singapore 2019 Singapore, Singapore Mar 11 - Mar 23, 2019 Live Training
SANS Norfolk 2019 Norfolk, VA Mar 18 - Mar 23, 2019 Live Training
SANS 2019 Orlando, FL Apr 01 - Apr 08, 2019 Live Training
SANS SelfStudy Books & MP3s Only Anytime Books & MP3s Only
SANS OnDemand Online Anytime Online