- Community
- Training
- Events
- Courses »
- Windows Forensic Analysis FOR408
- Hacker Tools, Techniques, Exploits & IH SEC504
- Advanced Incident Response and Threat Hunting FOR508
- Mac Forensics FOR518
- Memory Forensics FOR526
- Incident Response Mgt MGT535
- Advanced Network Forensics FOR572
- Cyber Threat Intelligence FOR578
- Advanced Smartphone Forensics FOR585
- Reverse-Engineering Malware FOR610
- Summits
- DFIR NetWars
- Forensics Brochure
- Free Assessment
- Certification
- Instructors
- About
DFIR Training & Courses
DFIR Training & Courses
SANS provides computer forensics training via live classroom training events and online. We currently have six computer forensics courses that prepare you in the disciplines of forensics investigations, incident response, memory forensics, network forensics, mobile device forensics, and reverse-engineering malware.
Available Forensics Courses
- FOR408: Windows Forensic Analysis
- FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
- FOR518: Mac Forensic Analysis
- FOR526: Memory Forensics In-Depth
- FOR572: Advanced Network Forensics and Analysis
- FOR578: Cyber Threat Intelligence
- FOR585: Advanced Smartphone Forensics
- FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
FOR408: Windows Forensic Analysis
| Training Event | Location | Dates | Training Type |
|---|---|---|---|
| SANS Las Vegas 2017 | Las Vegas, NV | Jan 23 - Jan 30, 2017 | Live Training |
| SANS Munich Winter 2017 | Munich, Germany | Feb 13 - Feb 18, 2017 | Live Training |
| SANS Secure Japan 2017 | Tokyo, Japan | Feb 13 - Feb 25, 2017 | Live Training |
| SANS Scottsdale 2017 | Scottsdale, AZ | Feb 20 - Feb 25, 2017 | Live Training |
| Community SANS Columbia FOR408 | Columbia, MD | Feb 20 - Feb 25, 2017 | Community SANS |
| SANS Secure Singapore 2017 | Singapore, Singapore | Mar 13 - Mar 25, 2017 | Live Training |
| SANS 2017 | Orlando, FL | Apr 07 - Apr 14, 2017 | Live Training |
| SANS 2017 - FOR408: Windows Forensic Analysis | Online | Apr 09 - Apr 14, 2017 | vLive! |
| SANS Security West 2017 | San Diego, CA | May 09 - May 18, 2017 | Live Training |
| SANS Northern Virginia - Reston 2017 | Reston, VA | May 21 - May 26, 2017 | Live Training |
| SANS London May 2017 | London, United Kingdom | May 22 - May 27, 2017 | Live Training |
| SANS San Francisco Summer 2017 | San Francisco, CA | Jun 05 - Jun 10, 2017 | Live Training |
| SANS vLive - FOR408: Windows Forensic Analysis | Online | Jun 06 - Jul 13, 2017 | vLive! |
| SANS Charlotte 2017 | Charlotte, NC | Jun 12 - Jun 17, 2017 | Live Training |
| Digital Forensics Summit & Training | Austin, TX | Jun 22 - Jun 29, 2017 | Summit |
| SANS Paris 2017 | Paris, France | Jun 26 - Jul 01, 2017 | Live Training |
| SANSFIRE 2017 | Washington, DC | Jul 22 - Jul 29, 2017 | Live Training |
| SANSFIRE 2017 - FOR408: Windows Forensic Analysis | Online | Jul 24 - Jul 29, 2017 | vLive! |
| SANS Boston 2017 | Boston, MA | Aug 07 - Aug 12, 2017 | Live Training |
| SANS New York City 2017 | New York City, NY | Aug 14 - Aug 19, 2017 | Live Training |
| SANS Salt Lake City 2017 | Salt Lake City, UT | Aug 14 - Aug 19, 2017 | Live Training |
| Community SANS Columbia FOR408 | Columbia, MD | Aug 14 - Aug 19, 2017 | Community SANS |
| SANS Adelaide 2017 | Adelaide, Australia | Aug 21 - Aug 26, 2017 | Live Training |
| SANS Virginia Beach 2017 | Virginia Beach, VA | Aug 21 - Sep 01, 2017 | Live Training |
| SANS SelfStudy | Books & MP3s Only | Anytime | Books & MP3s Only |
| SANS OnDemand | Online | Anytime | Online |
FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting
FOR518: Mac Forensic Analysis
| Training Event | Location | Dates | Training Type |
|---|---|---|---|
| SANS 2017 | Orlando, FL | Apr 07 - Apr 14, 2017 | Live Training |
| SANS Security West 2017 | San Diego, CA | May 09 - May 18, 2017 | Live Training |
| Digital Forensics Summit & Training | Austin, TX | Jun 22 - Jun 29, 2017 | Summit |
| SANS SelfStudy | Books & MP3s Only | Anytime | Books & MP3s Only |
| SANS OnDemand | Online | Anytime | Online |
FOR526: Memory Forensics In-Depth
| Training Event | Location | Dates | Training Type |
|---|---|---|---|
| SANS Secure Singapore 2017 | Singapore, Singapore | Mar 13 - Mar 25, 2017 | Live Training |
| SANS 2017 | Orlando, FL | Apr 07 - Apr 14, 2017 | Live Training |
| Threat Hunting and IR Summit | New Orleans, LA | Apr 18 - Apr 25, 2017 | Summit |
| SANS London May 2017 | London, United Kingdom | May 22 - May 27, 2017 | Live Training |
| Digital Forensics Summit & Training | Austin, TX | Jun 22 - Jun 29, 2017 | Summit |
| SANSFIRE 2017 | Washington, DC | Jul 22 - Jul 29, 2017 | Live Training |
FOR572: Advanced Network Forensics and Analysis
FOR578: Cyber Threat Intelligence
| Training Event | Location | Dates | Training Type |
|---|---|---|---|
| Cyber Threat Intelligence Summit & Training | Arlington, VA | Jan 25 - Feb 01, 2017 | Summit |
| Cyber Threat Intelligence Summit - FOR578: Cyber Threat Intelligence | Online | Jan 26 - Jan 30, 2017 | vLive! |
| SANS Secure India 2017 | Bangalore, India | Feb 20 - Mar 14, 2017 | Live Training |
| SANS London March 2017 | London, United Kingdom | Mar 13 - Mar 18, 2017 | Live Training |
| SANS Secure Singapore 2017 | Singapore, Singapore | Mar 13 - Mar 25, 2017 | Live Training |
| SANS 2017 | Orlando, FL | Apr 07 - Apr 14, 2017 | Live Training |
| SANS 2017 - FOR578: Cyber Threat Intelligence | Online | Apr 09 - Apr 13, 2017 | vLive! |
| Threat Hunting and IR Summit | New Orleans, LA | Apr 18 - Apr 25, 2017 | Summit |
| SANS Security West 2017 | San Diego, CA | May 09 - May 18, 2017 | Live Training |
| SANS London May 2017 | London, United Kingdom | May 22 - May 27, 2017 | Live Training |
| SANS Atlanta 2017 | Atlanta, GA | May 30 - Jun 04, 2017 | Live Training |
| SANS San Francisco Summer 2017 | San Francisco, CA | Jun 05 - Jun 10, 2017 | Live Training |
| SANS Rocky Mountain 2017 | Denver, CO | Jun 12 - Jun 17, 2017 | Live Training |
| SANS vLive - FOR578: Cyber Threat Intelligence | Online | Jun 12 - Jul 19, 2017 | vLive! |
| Digital Forensics Summit & Training | Austin, TX | Jun 22 - Jun 29, 2017 | Summit |
| SANS Columbia, MD 2017 | Columbia, MD | Jun 26 - Jul 01, 2017 | Live Training |
| SANS Cyber Defence Canberra 2017 | Canberra, Australia | Jun 26 - Jul 08, 2017 | Live Training |
| SANSFIRE 2017 | Washington, DC | Jul 22 - Jul 29, 2017 | Live Training |
| SANSFIRE 2017 - FOR578: Cyber Threat Intelligence | Online | Jul 24 - Jul 28, 2017 | vLive! |
| SANS San Antonio-August 2017 | San Antonio, TX | Aug 06 - Aug 11, 2017 | Live Training |
| SANS Boston 2017 | Boston, MA | Aug 07 - Aug 12, 2017 | Live Training |
| SANS Virginia Beach 2017 | Virginia Beach, VA | Aug 21 - Sep 01, 2017 | Live Training |
| SANS SelfStudy | Books & MP3s Only | Anytime | Books & MP3s Only |
| SANS OnDemand | Online | Anytime | Online |
FOR585: Advanced Smartphone Forensics
| Training Event | Location | Dates | Training Type |
|---|---|---|---|
| Cyber Threat Intelligence Summit & Training | Arlington, VA | Jan 25 - Feb 01, 2017 | Summit |
| SANS Secure Singapore 2017 | Singapore, Singapore | Mar 13 - Mar 25, 2017 | Live Training |
| SANS vLive - FOR585: Advanced Smartphone Forensics | Online | Mar 27 - May 03, 2017 | vLive! |
| SANS 2017 | Orlando, FL | Apr 07 - Apr 14, 2017 | Live Training |
| SANS London May 2017 | London, United Kingdom | May 22 - May 27, 2017 | Live Training |
| Digital Forensics Summit & Training | Austin, TX | Jun 22 - Jun 29, 2017 | Summit |
| SANSFIRE 2017 | Washington, DC | Jul 22 - Jul 29, 2017 | Live Training |
| SANS Chicago 2017 | Chicago, IL | Aug 21 - Aug 26, 2017 | Live Training |
| SANS SelfStudy | Books & MP3s Only | Anytime | Books & MP3s Only |
| SANS OnDemand | Online | Anytime | Online |
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
