New iPad Pro, Microsoft Surface Pro or $550 Off with SANS OnDemand or vLive - ends July 12!

Our DFIR Security Training Testimonials

Read what previous DFIR students say about the quality, effectiveness and practicality of their SANS security training.

Our DFIR courses span forensic and incident response best practices across many platforms and technologies including: Windows, Apple, mobile environments, random access memory, and malware.

Kind Words

Here are some of the many kind words we have received from previous students who have taken SANS DFIR training.

"Everything was great. Instructor, room, facilitators, food, labs, and course content. Rob Lee makes the class extremely engaging and lively."

FOR508, London

"We're setting up a new forensic capability and this course has given me everything I need to do just that"

FOR508, London

"Excellent. The breadth of this course is awe inspiring."

FOR508, London

"Intense, nothing can prepare you for learning from a true master of their art."

FOR508, London

"Rob Lee, being the Google of Forensics, was extremely engaging. He superbly delivered the course. I was extremely honoured and privileged to be a student in Rob Lee's class."

FOR508, London

"Most interesting course ever. This course brings you the next level of forensics. There's a lot to learn."

FOR508, Brussels

"Wow!! What a course!! One of the best courses I have attended in my learning career and glad I took this course specifically after passing."

FOR508, London

"This was a great course. I learned some great techniques which will lead to some changes in our incident response process."

FOR508, Brussels

"Provides an excellent starting point for those wanting to get into this field. The 'step-by-step' guide is fantastic."

FOR508, London

"Excellent. Really enjoyed the labs - they are vital for my learning style."

FOR508, London

"I found the course was invaluable. It taught me techniques to properly identify compromised systems, provide containment of the breach effectively, and efficiently remediate the incident."

FOR508, London

"Most in-depth, state of the art DFIR course I can imagine. For the first time I think defence can actually gain an advantage. Thank you!"

FOR508, London

"Excellent tutor and very good materials to learn from"

FOR508, London

"I believe anyone serious about their organisation's IP must take this course"

FOR508, London

"Fantastic course, very well presented with great labs that reinforce the taught material."

FOR572, London

"Excellent real world examples that can be taken away and applied back at the office."

FOR572, London

"The course manages to mix theoretical and practical learning in an amazing way."

FOR508, London

"Instructors extremely knowledgeable and able to draw on real world experiences."

FOR508, London

"Interesting. Engaging. Revealing."

FOR508, London

"Learning Memory Forensics is as cool as having a bite at the newest coolest way of cooking. That's how it feels to learn 508."

FOR508, Brussels

"The Super Timeline is a game changer for me at work. We will be changing our processes at work to use this - fantastic."

FOR508, Brussels

Take a SANS training course from one of our valued DFIR Instructors at a Training Event, Online or Privately, to study for a prestigious GIAC security certification.

For any training questions read our FAQs or email us emea@sans.org.


Training Events Offering DFIR Courses
Event Dates Register
SANS London July 2017 Jul 03 - Jul 08, 2017  
SANS Dublin 2017 Sep 11 - Sep 16, 2017  
SANS Copenhagen 2017 Sep 25 - Sep 30, 2017  
SANS London September 2017 Sep 25 - Sep 30, 2017  
SANS SEC504 at Cyber Security Week 2017 Sep 25 - Sep 30, 2017  
SANS DFIR Summit Prague 2017 Oct 02 - Oct 08, 2017  
SANS Brussels Autumn 2017 Oct 16 - Oct 21, 2017  
SANS Berlin 2017 Oct 23 - Oct 28, 2017  
SANS Gulf Region 2017 Nov 04 - Nov 16, 2017  
SANS Amsterdam 2017 Nov 06 - Nov 11, 2017  
SANS Paris November 2017 Nov 13 - Nov 18, 2017  
SANS London November 2017 Nov 27 - Dec 02, 2017  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice