Group Purchasing
Group Purchasing

SANS DFIR Summit & Training 2027

  • Summit: Aug 23–24 Training: Aug 25–30
  • Duration:
  • 11 Courses
  • 12 CPEs (Summit Only)
  • 1 NetWars Tournament
  • English
The Westin DC Downtown & Virtual (ET)
999 9th St NW, Washington, DC 20001
DFIR Summit & Training 2026
Rapid Triage Engaged
T-MINUS
00
00
00
00
Days
Hrs
Min
Sec
The disk is gone. The RAM is gone. What's left is a trace, and a story someone tried to erase.
One examiner sits between the breach and the truth — reconstructing what happened, artifact by artifact.
Every log is a witness. Every timestamp, a lead.
THIS IS DFIR. SANS DFIR SUMMIT & TRAINING 2027.
  • Technical Talks and Keynotes

    Real investigations, emerging research, and practical DFIR tradecraft.

  • Hands-On Workshops

    Practice today’s DFIR tools and investigative techniques.

  • Connect with the DFIR Community

    Compare approaches and tackle hard problems with fellow practitioners.

Summit: Aug 23-24 (In-Person Only) | Training: Aug 25-30 (Washington, DC & Virtual)

All of DFIR. One Event.

The SANS DFIR Summit brings together some of the field's most experienced practitioners, researchers, and investigators to share real-world cases, emerging research, open-source tools, and the techniques shaping digital forensics and incident response.

From ransomware and threat hunting to AI-related evidence and evolving investigative challenges, explore the problems DFIR teams are working through now, learn what's working in the field, and get hands-on with practical approaches you can bring back to your own investigations.

Come for the technical content. Stay for the community. Connect with fellow practitioners, compare approaches, and leave with new ideas to put to work and people you can call when the next hard problem comes up.

“Every talk has a little nugget that you can add to your forensic toolbox no matter what your forensic wheelhouse may be. This is a must-attend event.” - A. Sparling

Schedule

Summit Dates

Training Dates

Register

Summit Registration Only

$525 USD
$525 USD*Prices exclude applicable local taxes
In personIncludes
  • Talks, Presentations and Workshops
  • Unmatched Networking
  • Summit Social - Evening Reception
  • Access to Summit Exhibit Hall
  • Lunch, and Breaks with Snacks and Beverages
  • First Access to Approved Recordings and Decks
Attend In PersonLogin to register

Summit and Course Registration

$4,200 USD
In personIncludes
  • Course: Live Instructor Training with Hands-on Exercises
  • Course: DFIR NetWars Tournament
  • Summit: Talks, Presentations and Workshops
  • Summit: Unmatched Networking
  • Summit: Evening Reception
  • Summit: Access to Summit Exhibit Hall
  • Summit: Lunch and light refreshments will be provided during the event and scheduled breaks
Live onlineIncludes
  • Course: Virtual Live Instructor Training with Hands-On Exercises
  • Course: DFIR NetWars Tournament
Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Us

The Westin DC Downtown

Hotel Special Rates and Reservations

A special discounted rate of $249.00 S/D plus applicable taxes will be honored based on space availability. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

The destination fee is waived for SANS attendees who book through the links below, a savings of $40 per day.

These rates include Internet in your room and are only available through Friday, July 30, 2027.

Washington, DC: The Westin DC Downtown

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Business People Shaking Hands and Smiling

Additional Information

SANS DFIR Summit & Training 2027 | Cybersecurity Training