The 2025 SANS DFIR Summit is right around the corner! This event is always fun and fascinating, with many talks before our classes begin, and fun evening events too. I'll be there to teach FOR608. Hope to see you for there!

Learn to hunt cyber threats and respond to incidents at enterprise scale using focused data and scalable tools. Take FOR608 at #DFIRSummit w/ @mikepilkington next month! 💥 Save $600 w/ code SUMMIT*600 when you register & pay by July 11! 🔗 Learn More: sans.org/u/1zv0

🚀 Exciting News: @SANSInstitute is coming to my home town #Málaga! 🇪🇸 Starting today, #SANSMálaga2025 is officially on the map! 🏝️📍, including: 🔵 SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise™ 🔵 FOR578: Cyber Threat Intelligence™ 🔵 FOR500: Windows Forensic Analysis™ 🔵 FOR608: Enterprise-Class Incident Response & Threat Hunting™ 👇💬 More details coming soon: sans.org/cyber-security-trai… #SANSMalaga #CyberSecurity #SANSInstitute #InfosecTraining #GIAC #CyberSkills #GDSA #AllAroundDefender

Join @mikepilkington at #DFIRDallas2025 🤠 for FOR608! Learn to detect & respond to large-scale security incidents across Windows, Linux, macOS, cloud environments, & containerized services. Learn more about DFIR Dallas: sans.org/u/1A4a #ThreatHunting #IncidentResponse

🎉 Congrats to @mathias_fuchs on being promoted to #SANS Senior Instructor! Mat is an instructor for #FOR508 & #FOR608. Congrats again, Mat! We are so lucky to have you be an instrumental part of the #DFIR curriculum! 👏 Learn more about Mat, here: sans.org/profiles/mathias-fu…

Good morning, Salt Lake City! Today, the @sansforensics DFIR Summit switches to training, and some incredible courses will be starting shortly. #FOR608 has the new GEIR certificate available, and #FOR577 is perfect for anyone investigating #Linux intrusions. #dfir

.#FOR608 teaches you to handle large-scale incidents, focusing on enterprise tools for data collection and analysis techniques to track attacker activity across multiple systems. Take it with course author @tazwake at the #DFIRSummit Register here: sans.org/u/1x6R

今月はSANSのFOR608を受ける予定。楽しみ。

🚨🚨🚨 الحمدلله، وكأحد الأوائل في العالم أجزت اختبار GIAC Enterprise Incident Response المختص في الاستجابة للاختراقات والتحقيق الرقمي على مستوى الجهات الضخمة 💪🔥 هذا الاختبار يعتمد على كورس SANS FOR 608 والذي يغطي التالي: - إدارة فرق الاستجابة للحوادث السيبرانية الكبيرة - التحليل الزمني وربط الأحداث للاختراقات الضخمة تحليل أدلة: ويندوز، لينكس، ماك، Cloud, Container وغيرها الكثير! ترقبوا المزيد بحول الله 🫡❤️ I'm so proud to share that I passed the GIAC Enterprise Incident Response (GEIR) exam, as one of the few people around the world to do so. The training course for this exam was SANS FOR608: Enterprise-Class Incident Response & Threat Hunting 💪🔥 Topics that are covered by GIAC Enterprise Incident Response: - Incident Response Team Management and Coordination - Enterprise Incident Detection and Threat Hunting - Large Scale Event Correlation and Timeline Analysis - Multi-platform Artifact Analysis - Analysis of: Windows Artifacts Linux Artifacts macOS Artifacts Container Artifacts Cloud Environment Artifacts My journey of learning and growth doesn't stop here and I'm committed to continually advancing my skills and knowledge. Stay tuned for the next achievement inshallah 🫡 credly.com/badges/db29101a-f…

Some awesome news - #FOR608 now has a GIAC cert! The cert is in presales and will be available to order in a week or so - but this is an amazing chance to demonstrate practical knowledge in large-scale #incidentresponse. Find out more at sans.org/for608 @sansforensics

Excited to see that #FOR608 prep starts soon! Let's do this, @D2Rz_!

#FOR608 teaches the techniques to collect focused data for #incidentresponse & #threathunting, and dig into analysis methodologies to understand attacker movement and activity across hosts. Take it with @mikepilkington at #SANS2024 sans.org/u/1ujD #DFIR

This week has been over in Amsterdam on the SANS FOR608 course with @mathias_fuchs and it has been excellent. I highly recommend. @SANSNetWars tomorrow evening, finish off the week then home on Saturday. #SANSAmsterdam #FOR608

Deep dive into #FOR608 with @mathias_fuchs in #SANSAmsterdam this week! ⤵️

Enjoying the 1st day of @SANSInstitute FOR608 with @mathias_fuchs providing some great content. Looking forward to the rest of the week 🤩 @SANSEMEA #SANSAmsterdam

With just under four hours to go, the scoreboard for the top 3 teams in the #FOR608 class at #CDI2023 is INCREDIBLY close. Exciting session and some amazingly talented incident investigators. #dfir #infosec #cybersecurity #security #incidentresponse #forensics @sansforensics

In 5 hrs 45 minutes, there will be a new class of @sansforensics Lethal Forensicators! This will bring a great week of #FOR608 to an end here at #CDI Washington. #dfir #forensics #cybersecurity

🔒 Boost your incident response skills! 🚨 Join @SANSEMEA for FOR608: Enterprise-Class Incident Response & Threat Hunting in Munich. Limited seats, so don't miss out on this opportunity. Register now! sans.org/cyber-security-cour… #cybersecurity #incidentresponse #threathunting

📣Calling all cyber security people! 📣 Join the awesome FOR608 course at SANS Australia Spring 2023 event in Sydney in Sept. Enhance your DFIR & threat-hunting skills. Attend in-person or live-online fm anywhere in the world. #CyberSecurity #FOR608 #DFIR sans.org/cyber-security-trai…

Take #FOR608: Enterprise-Class Incident Response & #ThreatHunting with @mikepilkington at the #DFIRSummit The course teaches techniques to collect focused data for incident response and threat hunting and dig into analysis methodologies Register at sans.org/u/1pkc