Search

Show:

Sort by:

Course
FOR608: Enterprise-Class Incident Response & Threat Hunting
Learn to identify and respond to enterprise-class incidents. Deepen your threat hunting abilities using enterprise-class tools and digging into analysis methodologies to understand attacker movement.
Course
FOR518: Mac and iOS Forensic Analysis and Incident Response
Conduct detailed, in-depth analysis on raw data from Mac and iOS cases. Gain confidence in your forensic analysis and incident response skills with hands-on labs.
Course
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Learn the advanced incident response and threat hunting skills you need to identify, counter, and recover from a wide range of threats within enterprise networks.
Course
FOR509: Enterprise Cloud Forensics and Incident Response
Cloud forensics is evolving. FOR509 equips examiners to embrace new evidence sources in enterprise cloud environments instead of forcing outdated on-premise methods.
Course
FOR577: LINUX Incident Response and Threat Hunting
Learn the skills you need to identify, analyze, and respond to attacks on Linux platforms and how to use threat hunting techniques to find stealthy attackers who can bypass existing controls.
Course
FOR563: Applied AI for Digital Forensics and Incident Response: Leveraging Local Large Language Models
FOR563 teaches DFIR professionals to harness private, local AI using Large Language Models (LLMs) for secure, hands-on investigation and analysis at scale.
Course
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Deepen your advanced network forensics experience, including threat hunting, analysis, and incident response. Explore the tools, technology, and processes needed to integrate network evidence sources.
Event
SANS DFIR Europe Summit and Training 2026
SANS DFIR Europe Summit and Training 2026 delivers cutting-edge, hands-on cybersecurity training led by top digital forensics and incident response experts. Join us live in beautiful Prague or attend virtually from anywhere.
Whitepaper
Empowering Incident Response via Automation
This paper examines where incident response automation can be used to empower your teams and bring...
Whitepaper
Intelligence-Driven Incident Response with YARA
A review of Rapid7 UserInsight by SANS senior analyst Jerry Shenk. It discusses a tool that...