Phil Hagen

FellowPrincipal Information Security Researcher at Red Canary

Specialities

Digital Forensics and Incident Response

Connect with Phil

Jump to:

Profile
Student Reviews
Courses
Webcasts
Resources

About Phil Hagen

Phil Hagen is a SANS Faculty Fellow and the author and lead of SANS FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response. As the architect of FOR572, Phil integrates his investigative expertise into every lab so students practice workflows that have been tested in real-world cases. Phil is also the Principal Information Security Researcher at Red Canary, a ZScaler Company, where he supports the company’s content creation and open source programs.

Press & Media

Students Say

Slide 1 of 3
Even by SANS standards, Phil clearly 'goes the extra mile' in depth of information, especially on exercises.
Dai MorganFOR572 Student
Slide 2 of 3
I really like how Phil incorporates real-life examples into the material. It really helps me visualize it!
Ryan NelsonFOR572 Student
Slide 3 of 3
As a long-time, enterprise network defender, I can say that Phils knowledge is excellent and this class should be manditory training for all blue training.
NicFOR572 Student