Online Training - Best Offers of the Year ends 12/5 - Get the All New 11" iPad Pro, Microsoft Surface Pro, or Take $350 Off

Our DFIR Security Training Testimonials

Read what previous DFIR students say about the quality, effectiveness and practicality of their SANS security training.

Our DFIR courses span forensic and incident response best practices across many platforms and technologies including: Windows, Apple, mobile environments, random access memory, and malware.

Kind Words

Here are some of the many kind words we have received from previous students who have taken SANS DFIR training.

"Everything was great. Instructor, room, facilitators, food, labs, and course content. Rob Lee makes the class extremely engaging and lively."

FOR508, London

"We're setting up a new forensic capability and this course has given me everything I need to do just that"

FOR508, London

"Excellent. The breadth of this course is awe inspiring."

FOR508, London

"Intense, nothing can prepare you for learning from a true master of their art."

FOR508, London

"Rob Lee, being the Google of Forensics, was extremely engaging. He superbly delivered the course. I was extremely honoured and privileged to be a student in Rob Lee's class."

FOR508, London

"Most interesting course ever. This course brings you the next level of forensics. There's a lot to learn."

FOR508, Brussels

"Wow!! What a course!! One of the best courses I have attended in my learning career and glad I took this course specifically after passing."

FOR508, London

"This was a great course. I learned some great techniques which will lead to some changes in our incident response process."

FOR508, Brussels

"Provides an excellent starting point for those wanting to get into this field. The 'step-by-step' guide is fantastic."

FOR508, London

"Excellent. Really enjoyed the labs - they are vital for my learning style."

FOR508, London

"I found the course was invaluable. It taught me techniques to properly identify compromised systems, provide containment of the breach effectively, and efficiently remediate the incident."

FOR508, London

"Most in-depth, state of the art DFIR course I can imagine. For the first time I think defence can actually gain an advantage. Thank you!"

FOR508, London

"Excellent tutor and very good materials to learn from"

FOR508, London

"I believe anyone serious about their organisation's IP must take this course"

FOR508, London

"Fantastic course, very well presented with great labs that reinforce the taught material."

FOR572, London

"Excellent real world examples that can be taken away and applied back at the office."

FOR572, London

"The course manages to mix theoretical and practical learning in an amazing way."

FOR508, London

"Instructors extremely knowledgeable and able to draw on real world experiences."

FOR508, London

"Interesting. Engaging. Revealing."

FOR508, London

"Learning Memory Forensics is as cool as having a bite at the newest coolest way of cooking. That's how it feels to learn 508."

FOR508, Brussels

"The Super Timeline is a game changer for me at work. We will be changing our processes at work to use this - fantastic."

FOR508, Brussels

Take a SANS training course from one of our valued DFIR Instructors at a Training Event, Online or Privately, to study for a prestigious GIAC security certification.

For any training questions read our FAQs or email us emea@sans.org.


Training Events Offering DFIR Courses
Event Dates Register
SANS Stockholm 2018 Nov 26 - Dec 01, 2018  
SANS Khobar 2018 Dec 01 - Dec 06, 2018  
SANS Dublin 2018 Dec 03 - Dec 08, 2018  
SANS Frankfurt 2018 Dec 10 - Dec 15, 2018  
SANS Amsterdam January 2019 Jan 14 - Jan 19, 2019  
SANS Threat Hunting London 2019 Jan 14 - Jan 19, 2019  
SANS SEC504 Stuttgart 2019 (In English) Feb 04 - Feb 09, 2019  
SANS London February 2019 Feb 11 - Feb 16, 2019  
SANS Zurich February 2019 Feb 18 - Feb 23, 2019  
SANS Riyadh February 2019 Feb 23 - Feb 28, 2019  
SANS Brussels February 2019 Feb 25 - Mar 02, 2019  
SANS London March 2019 Mar 11 - Mar 16, 2019  
SANS Munich March 2019 Mar 18 - Mar 23, 2019  
SANS Jeddah March 2019 Mar 23 - Mar 28, 2019  
SANS Madrid March 2019 Mar 25 - Mar 30, 2019  
SANS Cyber Security Middle East Summit Apr 04 - Apr 11, 2019  
SANS London April 2019 Apr 08 - Apr 13, 2019  
SANS Riyadh April 2019 Apr 13 - Apr 18, 2019  
SANS Muscat April 2019 Apr 27 - May 02, 2019  
SANS Stockholm May 2019 May 13 - May 18, 2019  
SANS Milan May 2019 May 13 - May 18, 2019  
SANS Dublin May 2019 May 13 - May 18, 2019  
SANS Amsterdam May 2019 May 20 - May 25, 2019  
SANS Krakow May 2019 May 27 - Jun 01, 2019  
SANS London June 2019 Jun 03 - Jun 08, 2019  
SANS Zurich June 2019 Jun 03 - Jun 08, 2019  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice