Get an 11" iPad Pro, Surface Go 2, or $300 Off with OnDemand Training

DFIR Summit & Training 2020 - Live Online

Virtual, US Eastern | Thu, Jul 16 - Sat, Jul 25, 2020

In response to the escalation of the COVID-19 pandemic, we've made the decision to convert this training event into a Live Online event.

The courses below will take place online, using virtual software to stream live instructors to all registered students during the scheduled classroom hours. (Eastern Time) This alternate training format will allow us to deliver the cybersecurity training you expect while keeping you, our staff, and our instructors as safe as possible.

Your registration for a Live Online course includes electronically delivered courseware, live streaming instruction by a SANS instructor, course labs, and four months of online access to course recordings.

The advisory board members are volunteers from the cybersecurity community who provide input on topics, review CFP submissions, help recruit speakers, and provide mentoring to selected speakers. Interested in serving on the advisory board for a future Summit? Email SummitSpeakers@sans.org.


Alexis Brignoni

Alexis Brignoni @AlexisBrignoni

Alexis Brignoni has been serving the area of Orlando, Florida for the last 12 years as a Special Agent of a Federal Law Enforcement agency. A native of San Juan, Puerto Rico, he has a Bachelor's in Computer Science and an MBA in Management of Information Systems. Before working as a digital forensics examiner, he was a case agent tasked with investigating online crimes against children, network intrusions, intellectual property and online fraud among others. Currently holding multiple digital forensics certifications, Alexis Brignoni has been focused on mobile app digital forensics as an area of interest due to the ever-evolving challenge of parsing a never-ending stream of new applications for relevant data. He can be reached online via Twitter @AlexisBrignoni and on his blog at abrignoni.com.


Lesley Carhart

Lesley Carhart @hacks4pancakes

Lesley Carhart is a Principal Threat Analyst, Threat Operations Center at the industrial cyber security company Dragos, Inc. She is recognized as a subject matter expert in cybersecurity incident response and digital forensics, regularly speaking on the topic at conferences and universities. She has spent the last 11 years of her 20+ year IT career specializing in information security, with a heavy focus on response to nation-state adversary attacks. Prior to Dragos, she was the incident response team lead at Motorola Solutions, performing digital forensics and incident handling services for both enterprise and public safety customers. Her focus at Dragos is developing forensics and incident response tools and processes for uncharted areas of industrial systems. She is also a certified instructor for the Dragos “Assessing, Hunting and Monitoring Industrial Control System Networks” course.

In 2017, Lesley was named a “Top Woman in Cybersecurity” by Cyberscoop news and received the Guidance Enfuse conference “Women in Technology” award. She holds a Bachelor’s Degree in Network Technologies from DePaul University, A.A.S. in Avionics Systems and Electronics Systems, GIAC GCIH, GREM, GCFA, and GCFE certifications, and currently serves as a Cyber Systems NCO in the US Air Force Reserves.


Whitney Champion

Whitney Champion @shortxstack

Whitney is the lead architect at Recon InfoSec. She has held several roles throughout her career- security engineer, systems engineer, developer, cloud architect, consulting architect, to name a few. In the last 15 years, she has worked on security, operations, support, development, and consulting teams, in both the private and public sector, supporting anywhere from a handful of users to hundreds of thousands. No matter the role, security has always been an area of passion and focus.


Lodrina Cherne

Lodrina Cherne @hexplates

Lodrina Cherne is a Product Manager at Cybereason helping protect organizations from attack through EPP and EDR solutions, incident response, and security services. She also works as an instructor for SANS where she teaches Windows Forensic Analysis and helps students to advance their foundational understanding of DFIR. Throughout her 15 years in cybersecurity, she has been able to fight for people wrongly impacted by technology including as a volunteer for Operation Safe Escape which helps educate and empower victims of domestic violence with digital safety. In addition, her work investigating the “Sledgehammer” case in Turkey helped acquit more than 200 foreign imprisoned senior military officers after showing that the electronic documents used to indict them were forged.


Mari DeGrazia

Mari DeGrazia @maridegrazia

Mari is Senior Director of Incident Response at Security, where she leads high-profile incident response cases and helps clients find and respond to attackers in their environment. In her role as a SANS instructor for FOR500: Windows Forensic Analysis, Mari draws on nearly 20 years of experience in the IT industry, including 10 years in Digital Forensics and incident Response (DFIR).


Jessica Hyde

Jessica Hyde @B1N2H3X

Jessica Hyde is an experienced forensic examiner in both the commercial and government sectors. She is currently the Director of Forensics at Magnet Forensics and an Adjunct Professor teaching Mobile Forensics in the graduate programs at both Champlain College and George Mason University, where she achieved an MS in Computer Forensics. Her previous roles included performing forensic examinations as a Sr. Mobile Exploitation Analyst for Basis Technology, Senior at EY, and Senior Electrical Engineer at American Systems. Jessica is also proud to be a veteran of the United States Marine Corps.


Matt Linton

Matt Linton @0xMatt

Matt is an incident responder with experience throughout the security process, from architecture through penetration. He is formally trained in disaster management and specializes in rapid response, remediation, and hardening of compromised environments.


Francesco Picasso

Francesco Picasso @dfirfpi

Francesco Picasso is a DFIR professional, partner of Reality Net System Solutions, an Italian consulting firm where he performs digital investigations for private companies and for the public sector. When not tracing back attackers or suspects, he helps tuning C-SOCs and C-IRTs to hunt for threats. Francesco holds a Computer Science degree, a Ph.D. in "Intelligent Electronics for Security" and he is a SANS FOR508 instructor.


David Szili

David Szili @davidszili

David is managing partner and CTO at Alzette Information Security, a consulting company based in Luxembourg. He has more than eight years of professional experience in penetration testing, red teaming, vulnerability assessment, vulnerability management, security monitoring, security architecture design, incident response, digital forensics and software development.


Wendi Whitmore

Wendi Whitmore @wendiwhitmore

Wendi is the Vice President, X-Force Threat Intelligence at IBM. Wendi has nearly two decades of experience in incident response Investigations. At IBM, Wendi was instrumental in creating IBM X-Force IRIS which includes the global X-Force Incident Response, Proactive Services, Cyber Range, and Threat Intelligence practices. She began her career as a Special Agent conducting computer crime investigations with the Air Force Office of Special Investigations (AFOSI) and then, before joining IBM, she held executive level positions at CrowdStrike Services and Mandiant.