Two Days Left to Get a GIAC Certification Attempt Included with SANS Online Training!

FREE Digital Forensic & Incident Response Posters

SANS produces a wealth of downloadable resources, designed to help the DFIR community to learn and deploy new forensic & incident response skills. Download our free posters here.

Fraud, illegal intrusions, insider threats, phishing - cybercrime comes in many forms and organisations need to be ready and able to defend themselves.

SANS Digital Forensics and Incident Response Curriculum prepares students to uncover and respond to attacks - no matter how exotic and clandestine.

To help DFIR professionals leverage what they've learned, SANS produces many Digital Forensics Resources, including posters. These posters are created by a SANS Instructor or Course Author, and a graphic designer.

Across the DFIR curriculum there are many posters. The Windows Forensics poster presents a step-by-step guide that helps analysts to understanding whether a system is infected through spotting rogue code's tell-tails.

On the reverse side of the poster you'll find a graphical summary called Windows Artefact Analysis: Evidence of… The poster is a cheat sheet that helps analysts to remember where they can discover key indicators and signs of intrusion into a Windows system.

The Memory Forensics poster is an ideal companion for DFIR Curriculum students. On one side of the posters is a detailed guide to live memory analysis with Rekall (a state-of-the art memory analysis framework). The poster breaks down parsing a memory image with the Volatility Framework into a six step investigative methodology.

Flip the poster over and there's a handy guide to some of the memory structures that need to be analysed during a forensic investigation.

The DFIR Find Evil poster is a quick guide to spotting the difference between what's normal and what's abnormal. The poster is founded on the philosophy: analysts who quickly to spot abnormalities are ahead in the race to uncover rootkits, code injections and other rogue processes.

Other DFIR posters offer mobile threat analysis and attack surfaces.

Training Events Offering DFIR Courses
Event Dates Register
SANS London March 2018 Mar 05 - Mar 10, 2018  
SANS Paris March 2018 Mar 12 - Mar 17, 2018  
SANS Munich March 2018 Mar 19 - Mar 24, 2018  
SANS Abu Dhabi 2018 Apr 07 - Apr 12, 2018  
SANS Zurich 2018 Apr 16 - Apr 21, 2018  
SANS London April 2018 Apr 16 - Apr 21, 2018  
SANS Riyadh April 2018 Apr 28 - May 03, 2018  
SANS Doha 2018 Apr 28 - May 03, 2018  
SANS Amsterdam May 2018 May 28 - Jun 02, 2018  
SANS London June 2018 Jun 04 - Jun 12, 2018  
SANS Milan June 2018 Jun 11 - Jun 16, 2018  
SANS Oslo June 2018 Jun 18 - Jun 23, 2018  
SANS Paris June 2018 Jun 25 - Jun 30, 2018  
SANS London July 2018 Jul 02 - Jul 07, 2018  
SANS Pen Test Berlin 2018 Jul 23 - Jul 28, 2018  
SANS Krakow 2018 Aug 20 - Aug 25, 2018  
SANS Amsterdam September 2018 Sep 03 - Sep 08, 2018  
SANS Munich September 2018 Sep 16 - Sep 22, 2018  
SANS London September 2018 Sep 17 - Sep 22, 2018  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice