Instructors

Philip Hagen has over fifteen years of experience in information security, running the including deep technical tasks, management of an entire computer forensic services portfolio, and executive responsibilities.

Currently, Phil is the CEO at Red Canary, where he oversees the development and growth of their managed threat detection service, which minimizes the time between a compromise and detection. This helps to support faster and more decisive remediation of network-based intrusions.

Phil started his security career while attending the US Air Force Academy, with research covering both the academic and practical sides of security. He served in the Air Force as a communications officer at Beale AFB and the Pentagon. In 2003, Phil shifted to a government contractor, providing technical services for various IT and information security projects. These included systems that demanded 24x7x365 functionality. He later managed a team of 85 computer forensic professionals in the national security sector. He has provided forensic consulting services for law enforcement, government, and commercial clients prior to taking on the lead role at Red Canary. Phil is also a certified instructor for the SANS Institute.

Listen to Phil discuss "IT'S ALIVE!!! Investigating with Network-based Evidence" in this SANS webcast that every DFIR professional should listen to.

Type	Course / Location	Date	Register
vLive	FOR572: Advanced Network Forensics and Analysis Online	Aug 5, 2014 - Sep 11, 2014
Training Event	FOR572: Advanced Network Forensics and Analysis SANS Bangalore 2014 Bangalore, India	Sep 15, 2014 - Sep 27, 2014
Training Event	FOR572: Advanced Network Forensics and Analysis SANS Network Security 2014 Las Vegas, NV	Oct 19, 2014 - Oct 27, 2014
Simulcast	FOR572: Advanced Network Forensics and Analysis Online	Oct 20, 2014 - Oct 25, 2014
Training Event	FOR572: Advanced Network Forensics and Analysis SANS Sydney 2014 Sydney, Australia	Nov 10, 2014 - Nov 22, 2014

*Course contents may vary depending upon location, see specific event description for details.