SANS Institute DFIR Summit & Training to Feature Industry Leaders and New Mobile and Advanced Network Forensics Courses

May 08, 2014, 13:00 ET from SANS Institute

BETHESDA, Md., May 8, 2014 /PRNewswire-USNewswire/ -- Faulty digital forensic tools lead to false conclusions, so it's far better to be proficient in analysis than to rely on tool output alone. SANS Institute today announced the upcoming 2014 Digital Forensics & Incident Response (DFIR) Summit and Training in Austin, TX, June 3 – 10. Attendees will learn analytical skills to combat computer forensic crimes, as well as new concepts and approaches for conducting investigations.

DFIR experts from around the world will come together to share techniques and ideas to help investigators effectively respond to today's most challenging threats. Speakers will include Christopher Glyer, Technical Director, MANDIANT, a Division of FireEye; Chris Pogue, Director, SpiderLabs Americas; Shelly Giesbrecht, Senior Security Operations Analyst, Nexen Energy ULC; David Cowen, G-C Partners; and Mari DeGrazia, Computer Forensic Examiner, Verizon RISK Team. To view the summit agenda, please visit

According to DFIR summit speaker, David Cowen, Partner, G-C Partners, "one of the best things about the DFIR Summit is that it's totally vendor-neutral. The talks presented at the summit are all about methods, procedures, and research and not about the need to buy a tool or promote a product. The DFIR Summit is focused on the needs of private sector examiners who are dealing with modern threats from both external and internal sources."

This year's hands-on training offerings include two new courses to help investigators better understand and more accurately perform mobile and advanced network forensics. FOR585: Advanced Smartphone Forensics focuses on smartphones as sources of evidence and provides examiners with the skills to handle mobile devices in a forensically sound manner. Students will learn about the different technologies, discover malware, and analyze the results for use in digital investigations by diving deeper into the file systems of each smartphone. Students will be able to obtain actionable intelligence and recover and analyze data that commercial tools often miss for use in internal investigations, criminal and civil litigation, and security breach cases. 

FOR572: Advanced Network Forensics and Analysis covers the most critical skills needed to mount efficient and effective post-incident response investigations. Students will learn how to expand the forensic mindset by drawing on everything from residual data on the storage media of a system or device to the transient communications that occurred or continue to occur. The course covers the tools, technology, and processes required to integrate network evidence sources into investigations.

All course attendees are eligible to participate in SANS DFIR NetWars, a hands-on, interactive learning environment that enables DFIR professionals to develop and master the skills they need to excel in their field. For more information on the DFIR Summit & Training, including a complete list of courses, panel and discussion overviews, and instructors, or to register for the event, please visit the event website at

About SANS Institute
The SANS Institute was established in 1989 as a cooperative research and education organization. SANS is the most trusted and, by far, the largest source for world-class information security training and security certification in the world, offering over 50 training courses each year. GIAC, an affiliate of the SANS Institute, is a certification body featuring over 27 hands-on technical certifications in information security. SANS offers a myriad of free resources to the InfoSec community, including consensus projects, research reports, and newsletters. It also operates the Internet's early warning system—the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to help the entire information security community. For more information please visit the SANS website at