The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
- Tweets 33,224
- Following 104
- Followers 112,017
- Likes 3,979
Pinned Tweet
2 examiners. 2 high-profile cases. 1 stage.
At #SANSDFIR Summit, Heather Barnhart and Jason Higley deliver back-to-back keynotes, then unpack the forensic tradecraft behind the cases, exclusively in person.
📍 Arlington, VA | Oct. 15–16
Register here: go.sans.org/i2cTqC
4
4
5,594
📣 The #CTISummit Call for Presentations is OPEN!
Have a real-world case study, new technique, practical solution, tool, or lesson learned worth sharing with the CTI community?
⏰ Submit by Monday, Oct. 19, 5:00pm EDT
➡️ go.sans.org/PNfR2K
#ThreatIntel #CTI
5
2,449
The Idaho murders suspect studied investigators and appeared to leave almost no digital footprint. This October at #DFIRSummit in Arlington, Heather Barnhart reveals the evidence that helped build the case. In person only.
Save Your Seat: go.sans.org/TSSBBf
5
2,534
1 Summit. 3 focus areas: #DFIR, #ThreatHunting & #Ransomware.
@HeatherMahalik shares why #SANSDFIR belongs on your calendar. Join us in Arlington for exclusive keynotes, hands-on workshops & community, or watch select talks online.
🗓️ Oct. 15–16
go.sans.org/i2cTqC
2
4
2,440
AI governance in DFIR has to start with investigators who understand what's at stake when a finding enters an evidentiary record. As @HeatherMahalik, DFIR Curriculum Lead at SANS Institute, frames it, AI can speed up the work, but it never owns the conclusions.
#DFIR #AI
2
2
3
2,090
📣 Registration is open for the 15th Annual SANS #CTISummit!
Join the CTI community for fresh research, real-world case studies & practical tradecraft.
🏔️ Summit: Feb. 1–2 (In-Person Only)
💻 Training: Feb. 3–8 (In-Person & Virtual)
📍 Alexandria, VA
➡️ go.sans.org/xSO4ke
4
15
2,670
Built from #DFIRCommunity feedback, October’s revamped #DFIRSummit brings case-study keynotes, extended hands-on workshops, new posters, exclusive swag and the latest across #Ransomware, #ThreatHunting and all of #DFIR. A must-attend in-person experience: buff.ly/oqalvtk
Every investigation leaves a lesson behind.
Join us for the SANS #DFIR Summit to hear practitioners share real investigations, technical tradecraft, and practical lessons you can put to work immediately.
📅 Oct. 15–16 | Arlington, VA
go.sans.org/TSSBBf
2
3,854
SANS DFIR retweeted
Every investigation leaves a lesson behind.
Join us for the SANS #DFIR Summit to hear practitioners share real investigations, technical tradecraft, and practical lessons you can put to work immediately.
📅 Oct. 15–16 | Arlington, VA
go.sans.org/TSSBBf
3
17
8,183
Chain of custody doesn't end in the cloud.
@megan_roddie explains when to analyze in the cloud, when to export, and how to protect forensic integrity.
Read the blog: go.sans.org/Bz84ux
#DigitalForensics #CloudSecurity
12
43
4,308
AI adoption in DFIR is outpacing governance. SANS DFIR released two AI frameworks, one for Digital Forensics (SWGDE-aligned) and one for Incident Response (NIST CSF 2.0-aligned). Built by @HeatherMahalik, DFIR Curriculum Lead at SANS Institute.
#DFIR #AI
2
4
23
3,359
Sometimes #Ransomware groups expose their own playbook.
See what leaked data from The Gentlemen reveals about attacker tools, TTPs, victimology, and opportunities for disruption.
Read the blog from @maridegrazia: go.sans.org/q1LePP
#CTI #DFIR
1
3
15
2,864
SANS DFIR retweeted
Advance your DFIR career with the NEW Digital Forensics graduate certificate from @SANS_EDU.
Join @sansforensics curriculum lead @HeatherMahalik on August 27 for an exclusive look at the new program: go.sans.edu/d6W3hu
3
9
4,335
#AI is already in #DFIR workflows. The governance usually isn't.
SANS DFIR released two AI frameworks, one for Digital Forensics and one for Incident Response, showing where AI helps, where humans stay in control, and where it should never be trusted. go.sans.org/RNQ1SL
20
90
6,794
The next case won't look like the last one.
Join us for the SANS #DFIRSummit to compare investigations, share tradecraft, and explore what's working in digital forensics, incident response, threat hunting, and ransomware.
📅 Oct. 15–16 | Arlington, VA
go.sans.org/TSSBBf
1
3
2,245
📣 Registration is open for the 15th Annual SANS #CTISummit!
Join the CTI community for fresh research, real-world case studies & practical tradecraft.
🏔️ Summit: Feb. 1–2 (In-Person Only)
💻 Training: Feb. 3–8 (In-Person & Virtual)
📍 Alexandria, VA
➡️ go.sans.org/xSO4ke
4
2,731