Pen Test Austin - Two NEW courses, NetWars, CyberCity, Challenge coins all in Austin, TX!

FREE Digital Forensic & Incident Response Posters

SANS produces a wealth of downloadable resources, designed to help the DFIR community to learn and deploy new forensic & incident response skills. Download our free posters here.

Fraud, illegal intrusions, insider threats, phishing - cybercrime comes in many forms and organisations need to be ready and able to defend themselves.

SANS Digital Forensics and Incident Response Curriculum prepares students to uncover and respond to attacks - no matter how exotic and clandestine.

To help DFIR professionals leverage what they've learned, SANS produces many Digital Forensics Resources, including posters. These posters are created by a SANS Instructor or Course Author, and a graphic designer.

Across the DFIR curriculum there are many posters. The Windows Forensics poster presents a step-by-step guide that helps analysts to understanding whether a system is infected through spotting rogue code's tell-tails.

On the reverse side of the poster you'll find a graphical summary called Windows Artefact Analysis: Evidence of… The poster is a cheat sheet that helps analysts to remember where they can discover key indicators and signs of intrusion into a Windows system.

The Memory Forensics poster is an ideal companion for DFIR Curriculum students. On one side of the posters is a detailed guide to live memory analysis with Rekall (a state-of-the art memory analysis framework). The poster breaks down parsing a memory image with the Volatility Framework into a six step investigative methodology.

Flip the poster over and there's a handy guide to some of the memory structures that need to be analysed during a forensic investigation.

The DFIR Find Evil poster is a quick guide to spotting the difference between what's normal and what's abnormal. The poster is founded on the philosophy: analysts who quickly to spot abnormalities are ahead in the race to uncover rootkits, code injections and other rogue processes.

Other DFIR posters offer mobile threat analysis and attack surfaces.


Training Events Offering DFIR Courses
Event Dates Register
SANS Cyber Security Middle East Summit Apr 04 - Apr 11, 2019  
SANS London April 2019 Apr 08 - Apr 13, 2019  
SANS Riyadh April 2019 Apr 13 - Apr 18, 2019  
SANS FOR585 Madrid April 2019 (in Spanish) Apr 22 - Apr 27, 2019  
SANS Muscat April 2019 Apr 27 - May 02, 2019  
SANS Stockholm May 2019 May 13 - May 18, 2019  
SANS Milan May 2019 May 13 - May 18, 2019  
SANS Dublin May 2019 May 13 - May 18, 2019  
SANS Amsterdam May 2019 May 20 - May 25, 2019  
SANS Krakow May 2019 May 27 - Jun 01, 2019  
SANS London June 2019 Jun 03 - Jun 08, 2019  
SANS Zurich June 2019 Jun 03 - Jun 08, 2019  
SANS Paris July 2019 Jul 01 - Jul 06, 2019  
SANS Munich July 2019 Jul 01 - Jul 06, 2019  
SANS London July 2019 Jul 08 - Jul 13, 2019  
SANS Pen Test Hackfest Europe 2019 Jul 22 - Jul 28, 2019  
SANS London August 2019 Aug 05 - Aug 10, 2019  
SANS Prague August 2019 Aug 12 - Aug 17, 2019  
SANS Amsterdam August 2019 Aug 19 - Aug 24, 2019  
SANS Copenhagen August 2019 Aug 26 - Aug 31, 2019  
SANS Munich September 2019 Sep 02 - Sep 07, 2019  
SANS Brussels September 2019 Sep 02 - Sep 07, 2019  
SANS Paris September 2019 Sep 16 - Sep 21, 2019  
SANS Rome September 2019 Sep 16 - Sep 21, 2019  
SANS Bahrain September 2019 Sep 21 - Sep 26, 2019  
SANS London September 2019 Sep 23 - Sep 28, 2019  
SANS DFIR Prague 2019 Sep 30 - Oct 06, 2019  
SANS Doha October 2019 Oct 12 - Oct 17, 2019  
SANS London October 2019 Oct 14 - Oct 19, 2019  
SANS SEC504 Madrid October 2019 (in Spanish) Oct 14 - Oct 19, 2019  
SANS Amsterdam October 2019 Oct 28 - Nov 02, 2019  
SANS Paris November 2019 Nov 04 - Nov 09, 2019  
SANS London November 2019 Nov 11 - Nov 16, 2019  
SANS Gulf Region 2019 Nov 16 - Nov 28, 2019  
SANS Munich November 2019 Nov 18 - Nov 23, 2019  
SANS Paris December 2019 Dec 02 - Dec 07, 2019  
SANS Frankfurt December 2019 Dec 09 - Dec 14, 2019  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice