digital-forensics.sans.orgDigital Forensics Training | Incident Response Training | SANS

Toggle navigation SANS Site Network Current Site Forensics & Incident Response Choose a different site Help Security Training Security Certification Internet Storm Center College Cybersecurity Programs Security Awareness Training Blue Team Operations Offensive Operations Industrial Control Systems Cloud Security Cybersecurity Leadership Government Private Training Active -- Community Blog Case Leads Newsletter Challenges Cheat Sheets Lethal Forensicator Coins List of Coin Winners Posters SIFT Workstation EZTools Summit Archives Webcasts Whitepapers Training Live & Online Training Courses Summits DFIR NetWars DFIR Netwars Continuous Free Assessment -- Certification GCFE - Forensic Examiner GCFA - Forensic Analyst GREM - Malware Analyst GNFA - Network Forensic Analyst GASF - Advanced Smartphone Forensic Analyst GCTI - Cyber Threat Intelligence Certified Analysts GIAC Code of Ethics GIAC Homepage Instructors About NEW! FOR308: Digital Forensics Essentials The Digital Forensics Essentials course provides the necessary knowledge to understand the Digital Forensics and Incident Response disciplines, how to be an effective and efficient Digital Forensics practitioner or Incident Responder, and how to effectively use digital evidence. Now available via Live Online & OnDemand. Special North America Offers with OnDemand Training Get an iPad mini (64 G), Samsung Galaxy Tab S5e, or Take $300 Off with OnDemand 5 & 6 day training courses through February 10. Free Community Resources SANS instructors produce thousands of free content-rich resources for the information security community. These resources are aimed to provide the latest in research and technology available to help support awareness and growth across a wide range of IT and OT security considerations. You only have one chance to collect data properly The FOR498: Battlefield Forensics & Data Acquisition course provides first responders and investigators alike with the advanced skills necessary to properly respond to, identify, collect, and preserve data from a wide range of storage devices and repositories, ensuring that the integrity of the evidence is beyond reproach. Now available via Live Online & OnDemand 1 2 3 4 Download SANS Digital Forensics and Incident Response Cheat Sheets and Posters Get DFIR Smartphone Free Poster Now! DFIR Courses Whether you're seeking to maintain a trail of evidence on host or network systems or hunting for threats using similar techniques, larger organizations are in need of specialized professionals who can move beyond first-response incident handling to analyze an attack and develop an appropriate remediation and recovery plan. Our DFIR Courses will teach you how to detect compromised systems, identify how and when a breach occurred, understand what attackers took or changed, and successfully contain and remediate incidents. Read More Resources Every year the SANS Digital Forensics & Incident Response (DFIR) Faculty produces thousands of free content rich resources for the digital forensics community. These resources are aimed to provide you with the latest in research and technology available to help you streamline your investigations. Our number one priority is to support the DFIR community by not only providing content to solve even the most difficult problems investigators face daily, but also provide an open forum for community mentoring, development and support. Read More SIFT Workstation Developed by an international team of forensics experts, the SIFT Workstation is available to the digital forensics and incident response community as a public service. SIFT features powerful cutting-edge open-source tools that are freely available and frequently updated and can match any modern DFIR tool suite. Thousands of individuals download the SIFT workstation yearly and many organizations had found SIFT to be the key investigative suite to use during their investigations. Download it now Keep up with the DFIR industry! Follow us on social media or register for our Community List Service and Monthly DFIR Newsletter SANS DFIR Blog SANS DFIR Youtube @sansforensics Twitter SANS DFIR LinkedIn Community Group SANS DFIR Facebook [DFIR] Mailing List Latest Blog Posts The SANS Blog is an active, ever-updating wealth of information including Digital Forensics and Incident Response. Learn More Latest Tweets @sansforensics #Cybersecurity is an exciting career choice within everyone' [...] January 30, 2021 - 6:40 PM Our #TechTuesdayWorkshops are two-hour, hands-on virtual env [...] January 30, 2021 - 3:10 PM This year, we invited @MindsEyeCCF to create graphic recordi [...] January 30, 2021 - 2:25 PM Latest Papers Developing a JavaScript Deobfuscator in .NET By Roberto Nardella Ubuntu Artifacts Generated by the By Brian Nishida Conf, Is it Ever Really Gone? The Impact of Private Browsing and Anti-Forensic Tools By Rick Schroeder "This course is valuable to Law Enforcement professionals that conduct computer crime investigations." - Reggie Harris, Federal Agent - DPE, OIG "For my line of work, basic & extensive understanding of the file system is extremely important. The literature and books on file systems for me are very critical & thanks you for them, great reference material" - Vince Ramirez, Las Vegas Metro P.D. "A great course on timeline, registry, and restore point forensics. SANS is continuing to be the leader on teaching new techniques happening with forensics." - Brad Garnett, Gibson County Sherrif's Dept. SANS Site Network Current Site Forensics & Incident Response Choose a different site Help Security Training Security Certification Internet Storm Center College Cybersecurity Programs Security Awareness Training Blue Team Operations Offensive Operations Industrial Control Systems Cloud Security Cybersecurity Leadership Government Private Training Community Training Certification Instructors About © 2008 - 2021 SANS™ Institute...