Conan Beach

Certified Instructor CandidateSpecial Agent at U.S. Government

Specialities

Digital Forensics and Incident Response, Open-Source Intelligence

Connect with Conan

Conan Beach

Jump to:

Profile
Courses

About Conan Beach

Conan Beach is a Special Agent with the U.S. Government and a SANS Certified Instructor Candidate who brings more than two decades of federal law enforcement experience to his role, including over ten years focused specifically on cybercrime. His investigative work has taken him deep into the digital underground, where he has pursued cases involving dark web marketplaces, cryptocurrency laundering, ransomware, business email compromise, fraud, and SIM-swapping schemes.

As co-author and lead instructor of SANS FOR589: Cybercrime Investigations, Conan channels this operational experience into a highly practical, lab-driven course designed for investigators and analysts. His background in undercover operations informs the modules on persona development and covert tradecraft, while his certifications in cryptocurrency tracing from Chainalysis directly support the course’s labs on tracking illicit financial flows. His Cellebrite training and forensics expertise strengthen instruction on digital evidence collection, and his extensive work in OSINT and SOCMINT shapes the course’s modules on online intelligence gathering. Each component of FOR589 reflects Conan’s commitment to blending technical rigor with investigative tradecraft.

Conan’s qualifications include multiple GIAC certifications—GIAC Certified Forensic Examiner (GCFE), GIAC Penetration Tester (GPEN), GIAC Certified Incident Handler (GCIH), and GIAC Security Essentials Certification (GSEC)—along with the Certified Electronic Crime Forensic Examiner (CECFE) and Certified Cyber Crime Investigator (3CI) credentials from the National White Collar Crime Center (NW3C). He also holds certifications as a Network Intrusion First Responder (NIFR) and in online undercover operations, underscoring his ability to operate effectively in both technical and covert environments.

Recognized for both investigative excellence and his dedication to training, Conan was named Outstanding Instructor of the Year by the Arizona High Intensity Drug Trafficking Area (HIDTA) in 2020, and his investigative team received Investigation of the Year honors in 2022 for dismantling darknet drug vendor operations tied to pill presses in Arizona and Florida.

Qualification Summary

Over 20 years of federal law enforcement service, with more than a decade focused on cyber-enabled crime as a Special Agent
Cybercrime expertise, including investigations into dark web marketplaces, cryptocurrency laundering, ransomware, business email compromise (BEC), SIM-swapping, fraud, and covert online operations
Co-author and lead instructor of SANS FOR589: Cybercrime Investigations, integrating real-world investigative experience into hands-on labs and a capstone investigation
Certified by Chainalysis in cryptocurrency tracing; extensive operational experience in following illicit blockchain transactions
Certified by Cellebrite in mobile and digital forensics; experienced in the acquisition and analysis of electronic evidence
GIAC Certifications: GCFE, GPEN, GCIH, and GSEC
NW3C Certifications: Certified Electronic Crime Forensic Examiner (CECFE) and Certified Cyber Crime Investigator (3CI) from the National White Collar Crime Center
Network Intrusion First Responder (NIFR) Certification and online undercover operations.
Frequent instructor and speaker on OSINT, SOCMINT, dark web tradecraft, undercover operations, and cybercrime investigations; known for mentorship and accessible, practical teaching.

Awards and Recognition

Outstanding Instructor of the Year, Arizona HIDTA (2020)
Investigation of the Year, Arizona HIDTA (2022), for dismantling darknet drug vendor networks tied to pill presses in Arizona and Florida