SANS Digital Forensics and Incident Response

Undecided about taking the new FOR589: Cybercrime Intelligence Course?

FOR585: Smartphone Forensic Analysis In-Depth course overview

FOR578: Cyber Threat Intelligence Course Overview

FOR528: Ransomware & Cyber Extortion Course Overview

What is the FOR528: Ransomware for Incident Responders course all about?

FOR498 - New Course Name, New Content & A Whole Lot of Actionable Intelligence in 90 min or less

Episode 180: Introducing FOR498A Forensic Data Acquisition

FOR578 Cyber Threat Intelligence Course Update - 6th day

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

Hunting Threat Actors Using OSINT

My “Aha!” Moment - Methods, Tips, & Lessons Learned in Threat Hunting - SANS THIR Summit 2019

Getting Started with the SIFT Workstation Webcast with Rob Lee

Understanding the Forensic Science in Digital Forensics

Episode 71: How do I convert hexadecimal to decimal?

Shedding Light on the macOS Spotlight Desktop Search Service - SANS DFIR Summit 2019

Keynote: Cobalt Strike Threat Hunting | Chad Tilbury

The Mind of a Hunter: A Cognitive, Data-Driven Approach - SANS Threat Hunting Summit 2017

Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017

The CTI Shadow Army: Tales from the Trenches - Small Business Owner/Solopreneur Edition

New Tools for Your Threat Hunting Toolbox

Keynote: Threat Hunting: Old Data, New Tricks!

EXT File System Recovery - SANS Digital Forensics and Incident Response Summit 2017

Getting started in DFIR: Testing 1,2,3 | Phill Moore

Wrap Up Panel

Picture Perfect: The Power of Attack Path Diagrams in DFIR Investigations

SANS DFIR Webcast: The Crazy New World of Cyber Investigations Law, Ethics, and Evidence

Trust but Verify: Why, When and How - SANS DFIR Summit 2016

2024 Ransomware Trends and Predictions

Customized Google Chrome Forensics with Python - DFIR Summit 2015

Threat Actor Tool Analysis at Enterprise Scale | Host: Ryan Chapman | September 19, 2023

Common misconceptions and mistakes made in Threat Hunting

Smartphone Forensics FOR585 Heather Mahalik

Episode 31: Mistakes in online evidence collection

Protecting the Cloud from Ransomware | Host: Ryan Chapman | June 20, 2023

Threat Intelligence At Microsoft: A Look Inside - Cyber Threat Intelligence Summit 2017

Network Forensics: Tools of the Trade… At Scale and on a Budget

Intellimation: Guidance for Integrating Automation in Your Cyber Threat Intelligence Program

Triage Collection and Timeline Analysis with KAPE

Should Countries Ban Ransomware Payments? | Host: Ryan Chapman | July 25, 2023

The Top 5 Misconceptions About Ransomware

From One Sec Guy to the Team that Saved the CISO’s Day | Threat Hunting & Incident Response Summit

Windows Credentials Attacks, Mitigations & Defense

EZ Tools/KAPE: How to Contribute to and Benefit from Open Source Contributions

Stay Ahead of Ransomware Livestream Series - Episode 2

SANS DFIR WEBCAST - Network Forensics What Are Your Investigations Missing

SANS DFIR Webcast - Whats New in REMnux v4 for Malware Analysis?

What’s new in FOR572: Advanced Network Forensics - Threat Hunting, Analysis, and Incident Response

Finding Evil in Windows 10 Compressed Memory

iOS Third Party Apps Analysis how to use the new reference guide poster

How to Intercept IP Connections in a Malware Analysis Lab

Finding and Decoding Malicious Powershell Scripts - SANS DFIR Summit 2018

From Tool Building to Scalable Automation - SANS DFIR Summit 2019 Keynote

Threat Intelligence is a Fallacy, but I May be Biased

SANS Threat Analysis Rundown (STAR) | Live Stream

Ransomware Kingpins LockBit Disrupted

Advanced Zeek Usage Scripting and Framework

Unmasking the Iranian APT COBALT MIRAGE

Cracking the Beacon: Automating The Extraction of Implant Configurations