Online Training Special Offer - Get an iPad Mini 4, Samsung Galaxy Tab A, or $250 Off OnDemand and vLive - Ends 9/27!

Our DFIR Security Training Testimonials

Read what previous DFIR students say about the quality, effectiveness and practicality of their SANS security training.

Our DFIR courses span forensic and incident response best practices across many platforms and technologies including: Windows, Apple, mobile environments, random access memory, and malware.

Kind Words

Here are some of the many kind words we have received from previous students who have taken SANS DFIR training.

"Everything was great. Instructor, room, facilitators, food, labs, and course content. Rob Lee makes the class extremely engaging and lively."

FOR508, London

"We're setting up a new forensic capability and this course has given me everything I need to do just that"

FOR508, London

"Excellent. The breadth of this course is awe inspiring."

FOR508, London

"Intense, nothing can prepare you for learning from a true master of their art."

FOR508, London

"Rob Lee, being the Google of Forensics, was extremely engaging. He superbly delivered the course. I was extremely honoured and privileged to be a student in Rob Lee's class."

FOR508, London

"Most interesting course ever. This course brings you the next level of forensics. There's a lot to learn."

FOR508, Brussels

"Wow!! What a course!! One of the best courses I have attended in my learning career and glad I took this course specifically after passing."

FOR508, London

"This was a great course. I learned some great techniques which will lead to some changes in our incident response process."

FOR508, Brussels

"Provides an excellent starting point for those wanting to get into this field. The 'step-by-step' guide is fantastic."

FOR508, London

"Excellent. Really enjoyed the labs - they are vital for my learning style."

FOR508, London

"I found the course was invaluable. It taught me techniques to properly identify compromised systems, provide containment of the breach effectively, and efficiently remediate the incident."

FOR508, London

"Most in-depth, state of the art DFIR course I can imagine. For the first time I think defence can actually gain an advantage. Thank you!"

FOR508, London

"Excellent tutor and very good materials to learn from"

FOR508, London

"I believe anyone serious about their organisation's IP must take this course"

FOR508, London

"Fantastic course, very well presented with great labs that reinforce the taught material."

FOR572, London

"Excellent real world examples that can be taken away and applied back at the office."

FOR572, London

"The course manages to mix theoretical and practical learning in an amazing way."

FOR508, London

"Instructors extremely knowledgeable and able to draw on real world experiences."

FOR508, London

"Interesting. Engaging. Revealing."

FOR508, London

"Learning Memory Forensics is as cool as having a bite at the newest coolest way of cooking. That's how it feels to learn 508."

FOR508, Brussels

"The Super Timeline is a game changer for me at work. We will be changing our processes at work to use this - fantastic."

FOR508, Brussels

Take a SANS training course from one of our valued DFIR Instructors at a Training Event, Online or Privately, to study for a prestigious GIAC security certification.

For any training questions read our FAQs or email us emea@sans.org.


Training Events Offering DFIR Courses
Event Dates Register
SANS Copenhagen 2017 Sep 25 - Sep 30, 2017  
SANS London September 2017 Sep 25 - Sep 30, 2017  
SANS SEC504 at Cyber Security Week 2017 Sep 25 - Sep 30, 2017  
SANS DFIR Prague Summit & Training 2017 Oct 02 - Oct 08, 2017  
SANS Brussels Autumn 2017 Oct 16 - Oct 21, 2017  
SANS Berlin 2017 Oct 23 - Oct 28, 2017  
SANS Gulf Region 2017 Nov 04 - Nov 16, 2017  
SANS Amsterdam 2017 Nov 06 - Nov 11, 2017  
SANS Milan November 2017 Nov 06 - Nov 11, 2017  
SANS Paris November 2017 Nov 13 - Nov 18, 2017  
SANS London November 2017 Nov 27 - Dec 02, 2017  
SANS Munich December 2017 Dec 04 - Dec 09, 2017  
SANS Frankfurt 2017 Dec 11 - Dec 16, 2017  
SANS Amsterdam January 2018 Jan 15 - Jan 20, 2018  
SANS London February 2018 Feb 05 - Feb 10, 2018  
SANS Oslo 2018 Feb 05 - Feb 10, 2018  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice