The ALL Digital Forensics, Threat Hunting & Incident Response Training Event
SANS DFIRCON Spring 2021 - Live Online (May 3-8, EDT), offers opportunities to practice and test your skills, network and share your ideas, and learn the latest solutions to overcome investigative challenges from the best Digital Forensics, Threat Hunting, and Incident Response (DFIR) practitioners currently working in the field.
DFIRCON was created to provide an all-inclusive learning experience that leverages the DFIR community’s unique willingness to support colleagues, provide solutions to those who are facing investigative challenges, and always stay ahead of adversaries.
This event offers cutting-edge DFIR training classes that will teach you the most effective ways to obtain forensic evidence, detect compromised systems, identify how and when a breach occurred, and successfully contain and remediate incidents. And you’ll learn it all from some of the best practitioners working in the industry today!

DFIR NetWars Tournament
Practice real-world skills through cutting-edge challenges and integrated storylines during DFIR NetWars Tournament, May 6 & 7th, 6:30-9:30 PM EDT. As a paid course registrant for SANS DFIRCON Spring 2021, you will receive an email invitation the week of the event detailing how to confirm your spot and join NetWars online. You will need to follow the steps in the email to join the tournament.
Learn about the SANS Live Online experience:
SANS DFIRCON Spring 2021 Features:
- Practical cyber security training taught by real-world practitioners
- Hands-on labs in a virtual environment
- Courseware in electronic and printed books
- Several courses aligning with GIAC certifications
- Archive of course lectures uploaded to your account daily during the event
- Four months of access to your course lectures so you can revisit the recordings
What attendees say about their SANS training experience:
“The knowledge and skills I learned at DFIRCON can be applied directly to what I do at my organization. This helps me be more effective and a more valuable member of my team.” - Jay Orellana, Beall's, Inc.
"Live Online is an excellent platform. It runs smoothly and is easy to navigate! Honestly the delivery platform is outstanding and makes learning remotely so much easier." - Basil Alghamdi, National Commercial Bank - AlahliNCB
"FOR572 was another top-notch course from SANS. This being my third SANS course, I know first-hand why these courses are considered the best in the industry. Keep up the great work!! - Aaron White, UC Santa Cruz
"As a multi-skilled security engineer, I have always wanted to take the FOR500 course. For me, this is akin to a wish come true and I also have the great privilege of learning from one the best training providers and instructors in the industry." - Remi Akintonde, Unum