Final Day to get an iPad Pro, Surface Pro or $400 Off Online Training!

Our DFIR Security Training Testimonials

Read what previous DFIR students say about the quality, effectiveness and practicality of their SANS security training.

Our DFIR courses span forensic and incident response best practices across many platforms and technologies including: Windows, Apple, mobile environments, random access memory, and malware.

Kind Words

Here are some of the many kind words we have received from previous students who have taken SANS DFIR training.

"Everything was great. Instructor, room, facilitators, food, labs, and course content. Rob Lee makes the class extremely engaging and lively."

FOR508, London

"We're setting up a new forensic capability and this course has given me everything I need to do just that"

FOR508, London

"Excellent. The breadth of this course is awe inspiring."

FOR508, London

"Intense, nothing can prepare you for learning from a true master of their art."

FOR508, London

"Rob Lee, being the Google of Forensics, was extremely engaging. He superbly delivered the course. I was extremely honoured and privileged to be a student in Rob Lee's class."

FOR508, London

"Most interesting course ever. This course brings you the next level of forensics. There's a lot to learn."

FOR508, Brussels

"Wow!! What a course!! One of the best courses I have attended in my learning career and glad I took this course specifically after passing."

FOR508, London

"This was a great course. I learned some great techniques which will lead to some changes in our incident response process."

FOR508, Brussels

"Provides an excellent starting point for those wanting to get into this field. The 'step-by-step' guide is fantastic."

FOR508, London

"Excellent. Really enjoyed the labs - they are vital for my learning style."

FOR508, London

"I found the course was invaluable. It taught me techniques to properly identify compromised systems, provide containment of the breach effectively, and efficiently remediate the incident."

FOR508, London

"Most in-depth, state of the art DFIR course I can imagine. For the first time I think defence can actually gain an advantage. Thank you!"

FOR508, London

"Excellent tutor and very good materials to learn from"

FOR508, London

"I believe anyone serious about their organisation's IP must take this course"

FOR508, London

"Fantastic course, very well presented with great labs that reinforce the taught material."

FOR572, London

"Excellent real world examples that can be taken away and applied back at the office."

FOR572, London

"The course manages to mix theoretical and practical learning in an amazing way."

FOR508, London

"Instructors extremely knowledgeable and able to draw on real world experiences."

FOR508, London

"Interesting. Engaging. Revealing."

FOR508, London

"Learning Memory Forensics is as cool as having a bite at the newest coolest way of cooking. That's how it feels to learn 508."

FOR508, Brussels

"The Super Timeline is a game changer for me at work. We will be changing our processes at work to use this - fantastic."

FOR508, Brussels

Take a SANS training course from one of our valued DFIR Instructors at a Training Event, Online or Privately, to study for a prestigious GIAC security certification.

For any training questions read our FAQs or email us emea@sans.org.


Training Events Offering DFIR Courses
Event Dates Register
SANS London November 2017 Nov 27 - Dec 02, 2017  
SANS Munich December 2017 Dec 04 - Dec 09, 2017  
SANS Frankfurt 2017 Dec 11 - Dec 16, 2017  
SANS Amsterdam January 2018 Jan 15 - Jan 20, 2018  
SANS Dubai 2018 Jan 27 - Feb 01, 2018  
SANS London February 2018 Feb 05 - Feb 10, 2018  
SANS Brussels February 2018 Feb 19 - Feb 24, 2018  
SANS London March 2018 Mar 05 - Mar 10, 2018  
SANS Paris March 2018 Mar 12 - Mar 17, 2018  
SANS Munich March 2018 Mar 19 - Mar 24, 2018  
SANS Abu Dhabi 2018 Apr 07 - Apr 12, 2018  
SANS Zurich 2018 Apr 16 - Apr 21, 2018  
SANS London April 2018 Apr 16 - Apr 21, 2018  
SANS Amsterdam May 2018 May 28 - Jun 02, 2018  
SANS Paris June 2018 Jun 25 - Jun 30, 2018  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice