Join us for the FREE Cyber Defense Forum | Live Online on October 9


Subscribe to SANS Newsletters

Join the SANS Community to receive the latest curated cyber security news, vulnerabilities and mitigations, training opportunities, and our webcast schedule.

SANS Institute Announces its First All-Digital Forensic and Incident Response Training Event

Offers One of the Industry's Most Comprehensive DFIR Training Experiences

  • Bethesda, MD
  • January 6, 2014

SANS Institute today announced it is bringing its most popular forensic courses together at one event with the introduction of the SANS Digital Forensics and Incident Response Training Event (DFIRCON -- pronounced dē-'fәr-'kän). This all-forensic event will take place in Monterey, CA, March 5 - 10. SANS will also debut two new forensic courses at the event, FOR572: Advanced Network Forensics and Analysis and FOR585: Advanced Smartphone Forensics.

This unique event brings SANS' top forensic experts together to offer attendees one of the industry's most comprehensive DFIR training experiences. Attendees also will have an opportunity to participate in SANS' recently launched NetWars DFIR Tournament and to attend a number of bonus evening seminars which will cover today's most pressing DFIR topics.

According to Phil Hagen, author of FOR572: Advanced Network Forensics and Analysis, "given the scale of today's enterprises and the growing number of devices used by employees, it is increasingly difficult to identify endpoints to examine during a forensic investigation. In many instances, the network has becomes its own medium for incident response and investigation. The ability to use evidence from all kinds of network devices as well as from captured network data itself is critical for successfully addressing threats today and tomorrow." FOR572 provides the tools and methods needed to conduct network investigations within environments of all sizes, using scenarios developed from real-world cases.

According to the co-author of FOR585: Advanced Smartphone Forensics, Heather Mahalik, "often, the smartphone is the only form of digital evidence relating to the investigation. Knowing how to recover all of the data residing on the smartphone is now an expectation in our field; therefore, examiners must understand the fundamentals of smartphone handling, data recovery, accessing locked devices, and manually recovering data hiding in the background on the device to be successful. FOR585 provides this knowledge for mobile device forensics experts of all levels."

DFIRCON will be held in Monterey, CA, March 5 - 10, 2014. For more information, including panel and discussion overviews and a complete list of instructors, or to register for the event or one of the courses offered via simulcast, please visit:

SANS Media Contact

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. Today, SANS is the most trusted and, by far, the largest provider of cyber security training and certification to professionals in government and commercial institutions worldwide. Renowned SANS instructors teach more than 60 courses at In-Person and Live Online cyber security training events, and more than 50 courses are available anytime, anywhere with our OnDemand platform. GIAC, an affiliate of the SANS Institute, validates practitioner skills through more than 35 hands-on, technical certifications in cyber security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers a master’s degree, graduate certificates, and an undergraduate certificate in cyber security. SANS Security Awareness, a division of SANS, provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their ‘human’ cybersecurity risk. SANS also delivers a wide variety of free resources to the InfoSec community including consensus projects, research reports, webcasts, podcasts, and newsletters; it also operates the Internet's early warning system – the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to support and educate the global information security community. (