Two Days Left to Get a GIAC Certification Attempt Included with SANS Online Training!

Our DFIR Security Training Testimonials

Read what previous DFIR students say about the quality, effectiveness and practicality of their SANS security training.

Our DFIR courses span forensic and incident response best practices across many platforms and technologies including: Windows, Apple, mobile environments, random access memory, and malware.

Kind Words

Here are some of the many kind words we have received from previous students who have taken SANS DFIR training.

"Everything was great. Instructor, room, facilitators, food, labs, and course content. Rob Lee makes the class extremely engaging and lively."

FOR508, London

"We're setting up a new forensic capability and this course has given me everything I need to do just that"

FOR508, London

"Excellent. The breadth of this course is awe inspiring."

FOR508, London

"Intense, nothing can prepare you for learning from a true master of their art."

FOR508, London

"Rob Lee, being the Google of Forensics, was extremely engaging. He superbly delivered the course. I was extremely honoured and privileged to be a student in Rob Lee's class."

FOR508, London

"Most interesting course ever. This course brings you the next level of forensics. There's a lot to learn."

FOR508, Brussels

"Wow!! What a course!! One of the best courses I have attended in my learning career and glad I took this course specifically after passing."

FOR508, London

"This was a great course. I learned some great techniques which will lead to some changes in our incident response process."

FOR508, Brussels

"Provides an excellent starting point for those wanting to get into this field. The 'step-by-step' guide is fantastic."

FOR508, London

"Excellent. Really enjoyed the labs - they are vital for my learning style."

FOR508, London

"I found the course was invaluable. It taught me techniques to properly identify compromised systems, provide containment of the breach effectively, and efficiently remediate the incident."

FOR508, London

"Most in-depth, state of the art DFIR course I can imagine. For the first time I think defence can actually gain an advantage. Thank you!"

FOR508, London

"Excellent tutor and very good materials to learn from"

FOR508, London

"I believe anyone serious about their organisation's IP must take this course"

FOR508, London

"Fantastic course, very well presented with great labs that reinforce the taught material."

FOR572, London

"Excellent real world examples that can be taken away and applied back at the office."

FOR572, London

"The course manages to mix theoretical and practical learning in an amazing way."

FOR508, London

"Instructors extremely knowledgeable and able to draw on real world experiences."

FOR508, London

"Interesting. Engaging. Revealing."

FOR508, London

"Learning Memory Forensics is as cool as having a bite at the newest coolest way of cooking. That's how it feels to learn 508."

FOR508, Brussels

"The Super Timeline is a game changer for me at work. We will be changing our processes at work to use this - fantastic."

FOR508, Brussels

Take a SANS training course from one of our valued DFIR Instructors at a Training Event, Online or Privately, to study for a prestigious GIAC security certification.

For any training questions read our FAQs or email us emea@sans.org.


Training Events Offering DFIR Courses
Event Dates Register
SANS London March 2018 Mar 05 - Mar 10, 2018  
SANS Paris March 2018 Mar 12 - Mar 17, 2018  
SANS Munich March 2018 Mar 19 - Mar 24, 2018  
SANS Abu Dhabi 2018 Apr 07 - Apr 12, 2018  
SANS Zurich 2018 Apr 16 - Apr 21, 2018  
SANS London April 2018 Apr 16 - Apr 21, 2018  
SANS Riyadh April 2018 Apr 28 - May 03, 2018  
SANS Doha 2018 Apr 28 - May 03, 2018  
SANS Amsterdam May 2018 May 28 - Jun 02, 2018  
SANS London June 2018 Jun 04 - Jun 12, 2018  
SANS Milan June 2018 Jun 11 - Jun 16, 2018  
SANS Oslo June 2018 Jun 18 - Jun 23, 2018  
SANS Paris June 2018 Jun 25 - Jun 30, 2018  
SANS London July 2018 Jul 02 - Jul 07, 2018  
SANS Pen Test Berlin 2018 Jul 23 - Jul 28, 2018  
SANS Krakow 2018 Aug 20 - Aug 25, 2018  
SANS Amsterdam September 2018 Sep 03 - Sep 08, 2018  
SANS Munich September 2018 Sep 16 - Sep 22, 2018  
SANS London September 2018 Sep 17 - Sep 22, 2018  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice