Last Day to Get an iPad mini, Surface Go 2, or Take $300 Off with OnDemand Training - Register Today!

Austin, TX | Wed, Jun 20 - Wed, Jun 27, 2012
This event is over,
but there are more training opportunities.

Summit Dates: June 26 - 27, 2012
Pre-Summit Course Dates: June 20 - 25, 2012
Summit Venue:
Omni Hotel Downtown Austin
700 San Jacinto @ 8th Street
Austin, TX 78701
Reservations: 1-800-843-6664 reference SANS
Special rate available until May 25
Standard Hotel room
Government per diem rate (proper ID required)
Phone: (512) 476-3700
Fax: (512) 397-4888
Web: Omni Hotel
Forensic 4cast Awards 2012: Voting Now Open!

Meet the Nominees - Place Your Vote

Voting closes end of day June 17, 2012.

The 5th annual Forensics and Incident Response Summit will again be held in the live musical capital of the world, Austin, Texas. The Summit will focus on high quality and extremely relevant content as well as panel discussions in Digital Forensics and Incident Response. The 2012 theme is currently in development as the digital forensics and incident response community is constantly evolving and our content promises to be cutting-edge and relevant to ensure you will be able to utilize the ideas presented when you return to your organization.

In addition, we encourage you to take every opportunity to make the most of this event from attending the Summit to registering for one or more of the pre-summit training classes taught by SANS' top-rated instructors.

The following skills based courses will be offered June 20-25, 2012.
FOR 408 - Computer Forensic Investigations - Windows In-Depth

This class focuses on the critical knowledge of the Windows OS that every digital forensic analyst must know to investigate computer incidents successfully. You will learn how computer forensic analysts focus on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation. If this is your first computer forensics course with SANS we recommend you start here.

FOR 508 - Advanced Computer Forensic Analysis and Incident Response

Advanced Computer Forensic Analysis and Incident Response will help you start to become a master of advanced incident response and computer forensics tools and techniques to investigate data breach intrusions, tech-savvy rogue employees, the advanced persistent threat, and complex digital forensic cases.

FOR 558 - Network Forensics

We begin by diving right into covert tunnel analysis, DHCP log examination, and sniffing traffic. By day two, you'll be extracting tunneled flow data from DNS NULL records and extracting evidence from firewall logs. On day three, we analyze Snort captures and the web proxy cache. You'll carve out cached web pages and images from the Squid web proxy. For the last two days, you'll be part of a live hands-on investigation. Working in teams, you'll use network forensics to solve a crime and present your case.

FOR 610 - Reverse-Engineering Malware: Malware Analysis Tools and Techniques

This popular malware analysis course has helped forensic investigators, malware specialists, incident responders, and IT administrators assess malware threats. The course teaches a practical approach to examining malicious programs-spyware, bots, trojans, etc.-that target or run on Microsoft Windows. This training also looks at reversing Web-based malware, such as JavaScript and Flash files, as well as malicious document files. By the end of the course, you'll learn how to reverse-engineer malicious software using a variety of system and network monitoring utilities, a disassembler, a debugger, and other tools for turning malware inside-out!

Advisory Council (Click here for full bios on council members)

  • Harlan Carvey, DFIR Researcher
  • Frederick Chang, PhD, President, 21CT
  • Eric Huber, VP, Manager of High Tech Investigations
  • Rob Lee, SANS Faculty Fellow
  • Detective Cindy Murphy, City of Madison, WI
  • Alan Paller, Director of Research, SANS Institute
  • Hal Pomeranz, Founder, Deer Run Associates
  • Chad Tilbury, SANS Certified Instructor
  • Lenny Zeltser, SANS Senior Instructor

This event promises to bring together the leading minds in digital forensics and incident response community. Evening events are being planned to give you the opportunity to enjoy Austin's best. Share a table with your peers, friends and speakers. Rub shoulders with people who do what you do - from a wide cross section of industries, company sizes and experiences. See you in Austin.

I never fail to walk away from these summits with more knowledge and passion for what I do! - Steve Wallace, Lyondell Basell Industries

Hands down the forensic summit is the most field specific conference with the highest quality staff, speaker and attendees. It is a must for forensicators! - Larry Sult, SSPA

Still the best bang for the buck when staying current in DFIR - Mark Hoffman, Digital Discovery

Incredible information to better your forensics/ IR team, picks up where the technical tracks leave off - Jeff Wichman

Harlan Carvey said, it was totally awesome and well worth every second I was there. Carvey's comments can be viewed at Windows Incident Response blog.

Chris Pogue wrote, Being able to hear speakers like Harlan Carvey, Oive Carroll, Richard Bejtlich (pronounced BAIT-LICK), Jesse Kornblum, Jamie Butler, Troy Larson, and Eoghan (pronounced OWEN) Casey all in one event is pretty impressive. Now throw into the mix representatives from the FBI, Secret Service, DoD, Georgia Tech, and various local, state, and federal agencies and you have something pretty special. The quality of the speakers at this year's summit made this THE conference to be at in 2009! Again, great work Rob! Pogue's full take on the Summit is available at his blog, The Digital Standard