Training Events

Forensics courses are available at SANS live classroom training events and other delivery methods such as:

SANS OnDemand, Community SANS, Mentor Sessions, OnSite and Self-Study.


Below is a listing of upcoming forensics courses.

SECURITY 408 | SECURITY 508 | SECURITY 526 | SECURITY 558 | SECURITY 563 | SECURITY 606 | SECURITY 610 |

OnDemand Training-training
Security 408 :: Computer Forensic Essentials
Event Location Dates Delivery Method
SANS vLive! - Security 408 - Rob LeeSANS vLive! SEC408-200911, VANov 30, 2009 - Feb 01, 2010
SANS CDI East 2009Washington DCDec 11, 2009 - Dec 18, 2009Live Event
SANS Security East 2010New Orleans, LAJan 10, 2010 - Jan 18, 2010Live Event
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event
SANS Security West 2010San Diego, CAMay 07, 2010 - May 15, 2010Live Event
SANS vLive! - SEC 408 - Rob LeeSANS vLive! SEC408 - 201006, VAJun 08, 2010 - Aug 24, 2010




Security 508 :: Computer Forensics, Investigation, and Response
Event Location Dates Delivery Method
Mentor Session - 508Toronto, ONNov 09, 2009 - Jan 03, 2010Mentor
Hong Kong Advanced Forensics SeminarHong Kong, Hong KongNov 09, 2009 - Nov 14, 2009Live Event
Mentor Session - SEC508Mansfield, MANov 10, 2009 - Feb 02, 2010Mentor
SANS Vancouver 2009Vancouver, Nov 14, 2009 - Nov 19, 2009Live Event
Mentor Session - Security 508Houston, TXNov 17, 2009 - Feb 09, 2010Mentor
Mentor Session - SEC508Mexico City, MexicoNov 18, 2009 - Jan 20, 2010Mentor
SANS London 2009London, United KingdomNov 28, 2009 - Dec 06, 2009Live Event
Community SANS Tucson 2009Tucson, AZNov 30, 2009 - Dec 05, 2009Community SANS
Community SANS Colorado Springs 2009Colorado Springs, CONov 30, 2009 - Dec 05, 2009Community SANS
Mentor Session - Security 508San Diego, CADec 01, 2009 - Feb 16, 2010Mentor
Mentor Session - SEC508Atlanta, GADec 02, 2009 - Feb 17, 2010Mentor
Mentor Session - SEC508Medellín, ColombiaDec 02, 2009 - Dec 04, 2009Mentor
SANS CDI East 2009Washington DCDec 11, 2009 - Dec 18, 2009Live Event
Mentor Session - Security 508Charlotte, NCJan 14, 2010 - Mar 18, 2010Mentor
Mentor Session - Security 508Denver, COJan 19, 2010 - Mar 23, 2010Mentor
Community SANS Lake Tahoe 2010Lake Tahoe, CAJan 25, 2010 - Jan 30, 2010Community SANS
SANS Phoenix 2010Phoenix, AZFeb 14, 2010 - Feb 20, 2010Live Event
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event
Mentor Session - SEC508Greeley, COMar 11, 2010 - May 13, 2010Mentor
SANS vLive! - SEC 508 - Rob LeeSANS vLive! SEC508 - 201003, VAMar 23, 2010 - Apr 29, 2010
SANS Northern Virginia Bootcamp 2010Reston, VAApr 06, 2010 - Apr 13, 2010Live Event
Mentor Session - SEC508Boise, IDSep 28, 2010 - Nov 30, 2010Mentor
SANS OnDemandOnlineAnytimeSelf Paced
SANS SelfStudyBooks & MP3s OnlyAnytimeSelf Paced




Security 526 :: Advanced Filesystem Recovery and Memory Forensics
Event Location Dates Delivery Method
Hong Kong Advanced Forensics SeminarHong Kong, Hong KongNov 09, 2009 - Nov 14, 2009Live Event
SANS London 2009London, United KingdomNov 28, 2009 - Dec 06, 2009Live Event
SANS CDI East 2009Washington DCDec 11, 2009 - Dec 18, 2009Live Event
SANS Security East 2010New Orleans, LAJan 10, 2010 - Jan 18, 2010Live Event
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event
SANS OnDemandOnlineAnytimeSelf Paced




Security 558 :: Network Forensics
Event Location Dates Delivery Method
Community SANS Forensics DC 2010Alexandria, VAFeb 22, 2010 - Feb 26, 2010Community SANS
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event




Security 563 :: Mobile Device Forensics
Event Location Dates Delivery Method
SANS Security East 2010New Orleans, LAJan 10, 2010 - Jan 18, 2010Live Event
Community SANS San Antonio 2010San Antonio, TXJan 25, 2010 - Jan 29, 2010Community SANS
SANS Security West 2010San Diego, CAMay 07, 2010 - May 15, 2010Live Event




Security 606 :: Drive and Data Recovery Forensics
Event Location Dates Delivery Method
SANS CDI East 2009Washington DCDec 11, 2009 - Dec 18, 2009Live Event
Community SANS Atlanta 2010Atlanta, GAFeb 08, 2010 - Feb 13, 2010Community SANS
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event
SANS Security West 2010San Diego, CAMay 07, 2010 - May 15, 2010Live Event




Security 610 :: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Event Location Dates Delivery Method
SANS CDI East 2009Washington DCDec 11, 2009 - Dec 18, 2009Live Event
SANS Security East 2010New Orleans, LAJan 10, 2010 - Jan 18, 2010Live Event
SANS vLive! - SEC 610 - Mike MurrSANS vLive! SEC610 - 201001, VAJan 25, 2010 - Feb 17, 2010
SANS 2010Orlando, FLMar 06, 2010 - Mar 15, 2010Live Event
SANS Security West 2010San Diego, CAMay 07, 2010 - May 15, 2010Live Event
Mentor Session - SEC610Ottawa, ONMay 13, 2010 - Jun 17, 2010Mentor
SANS OnDemandOnlineAnytimeSelf Paced
SANS SelfStudyBooks & MP3s OnlyAnytimeSelf Paced




"This is awsome! We're seeing details that most people don't even know exist" - John Wright, Info Tech, Inc.
"The class provided in-depth, real world, hands-on information" - Robert Dale Drollinger, General Dynamics
SANS Institute