Training
Featured CourseView All Courses

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

SEC595Cyber Defense, Artificial Intelligence
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
View course detailsRegister
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely.

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk With an Expert
Talk With an Expert

SANS DFIR Summit & Training 2026

  • Thu, Oct 15 - Thu, Oct 22, 2026
  • 13 Courses
  • 12 CPEs (Summit Only)
  • English
Arlington, VA & Virtual (ET)
DFIR Summit & Training 2026
Jump to:

Summit: Oct 15-16 | Training: Oct 17-22

If You Work in DFIR, This is the Must-Attend Event of the Year

  • Slide 1 of 2
    DFIR Summit & Training 2026, Teachers On A Stage
  • Slide 2 of 2
    DFIR Summit & Training 2026, Summit Room

Every year, DFIR professionals from around the world come together at the SANS DFIR Summit to tackle new challenges, explore the latest open-source forensic tools and fresh research, share real-world case studies, and exchange proven investigative strategies. Attendees connect with top DFIR practitioners across the community — an essential part of keeping their skills sharp and their work impactful.

“Every talk has a little nugget that you can add to your forensic toolbox no matter what your forensic wheelhouse may be. This is a must-attend event.” - A. Sparling

What Attendees Say

  • Slide 1 of 4
    The DFIR Summit never disappoints and is still the #1 DFIR event. As a leader, it allows me to keep a pulse on cutting-edge research and to meet folks.
    Brad Garnett
  • Slide 2 of 4
    I've been to large events where I only saw 3 people out of 3,000 that I knew. I came to the DFIR Summit, and saw 30 out of 300. This is like a good family reunion, a time to rejuvenate and reconnect with my "tribe."
    Frank McClain
  • Slide 3 of 4
    For new and veterans alike, the info you get from the Summits are second to none. This was my first Summit! I can't wait for the next one!
    Mike Lentoski
  • Slide 4 of 4
    This Summit creates a ton of new ideas on how to improve our incident response processes.
    Andy V.
Slide 1 of 0

The knowledge you'll absorb in just two days will last the entire year. Whether you’re attending your first DFIR Summit or returning for your seventeenth, you'll join a community that shares a common drive to seek truth through digital forensics and eradicate attackers during incident response engagements. 

Early Bird Offer

Save $900 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by March 28, 2026.

Register

Summit and Course Registration

from $5,250 USD
In personIncludes
  • Course: Live Instructor Training with Hands-on Exercises
  • Course: DFIR NetWars Tournament with purchase of a course
  • Summit: Talks, Presentations and Workshops
  • Summit: Unmatched Networking
  • Summit: Evening Reception
  • Summit: Access to Summit Exhibit Hall
  • Summit: Light Breakfast, Lunch, and Breaks with Snacks and Beverages
Select course to Enroll
Live onlineIncludes
  • Course: Virtual Live Instructor Training with Hands-On Exercises
  • Summit: Access to Select Talks
  • Summit: Interactive Chat on Slack
  • First Access to Approved Recordings and Decks
Select course to Enroll

Summit Registration Only

from Free
$525 USD*Prices exclude applicable local taxes
In personIncludes
  • Talks, Presentations and Workshops
  • Unmatched Networking
  • Evening Reception
  • Access to Summit Exhibit Hall
  • Light Breakfast, Lunch, and Breaks with Snacks and Beverages
  • First Access to Approved Recordings and Decks
Attend In PersonLogin to register
Free
Live onlineIncludes
  • Access to Select Talks
  • Interactive Chat on Slack
  • First Access to Approved Recordings and Decks
Login to register
Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Us

GIAC Certifications

2 Free practice tests when you add a certification exam attempt to your course. Available for select courses below.

Extra 4 Months of Course Access

Add OnDemand access for 4 months to help you prepare for your GIAC exam. Available for select courses below.

NetWars Tournament

Play two evenings of the DFIR NetWars Tournament. Free with purchase of a 4, 5, or 6 day course

Summit Chairs

Heather Barnhart

Heather Barnhart

DFIR Curriculum Lead and Head of Faculty

Heather has 20+ years of experience working with government agencies, defense contractors, law enforcement, and Fortune 500 companies. Her case experience ranges from fraud, crimes against children, counter-terrorism, and homicide investigations.

Learn more
Phil Hagen

Phil Hagen

Principal Information Security Researcher

Phil Hagen shaped network forensics with SOF-ELK® and SANS FOR572, setting standards in large-scale log analysis and response. His role in exposing a global fraud ring behind hundreds of millions in losses defines his lasting impact on cybersecurity.

Learn more

Hilton Arlington Rosslyn The Key

Hotel Special Rates and Reservations

A special discounted rate of $289.00 S/D plus applicable taxes will be honored based on space availability. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

Self-parking with in and out privileges is discounted for SANS attendees at $20 per day for commuters and $30 per overnight.

These rates include Internet in your room and are only available through Tuesday, September 22, 2026.

Book A Regular ReservationBook A Per Diem Government Reservation
Hilton Arlington Rosslyn The Key

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

People at laptops smiling

More Information

Hilton Arlington Rosslyn The Key

The hotel is located just one mile from Georgetown and Georgetown Waterfront Park. The Arlington National Cemetery and shopping at The Crossing Clarendon are six minutes away. Washington DC and Ronald Reagan Washington National Airport are within eight miles. Enjoy views of DC and Potomac River, and on-site dining.

Hotel Check In
View Hotel

Travel Arrangements and Directions

Self-parking with in and out privileges is discounted for SANS attendees at $20 per day for commuters and $30 per overnight. Venue Parking Details - Self-Parking: $45 per day Rate listed is prevailing and subject to change. Alternative Parking Options - SANS recommends researching nearby parking facilities for more options. Popular parking apps that can help you locate and reserve space during your training: SpotHero, ParkMobile, and ParkWhiz. Distance from Nearby Airport - Reagan Washington National Airport (DCA): Approximately 4.0 miles.

Travel Arrangements and Parking
Google Maps

Hilton "Find Your Perfect Match" Status Match Promotion

Unlock Hilton Gold Status with staying 8 nights in a 90-day period. Did you know by staying just 8 nights in a 90-day period with Hilton, you can status match your current loyalty program to Hilton Gold Status? Hilton Gold Status provides exclusive perks such as a daily food and beverage credit, premium internet access, potential room upgrades based on availability, and many more benefits.

Hilton
View More

SANS North America Summits Volunteer Program

The SANS North America Summit Volunteer Program is a popular and competitive way for professionals to attend two-day SANS Summits in-person for free, in exchange for their assistance with the Summit. Summit Volunteers assist the team onsite with various tasks to set up, support, and tear down the event afterward. To learn more about the qualifications and how to apply, please visit our NA Summit Volunteer Program page.

SANS Summits
Learn More