- Advanced Incident Response FOR508 Chad Tilbury
- Crisis Communication for Incident Response - SANS DFIR Summit 2015
- Incident Response Training Course - SANS Institute - DFIR - FOR508 - Chad Tilbury
- Incident Response Training Course - SANS Institute - DFIR - FOR508 - Rob Lee
- MIG: Mozilla’s Distributed Platform for Real-Time Forensics of Endpoints - SANS DFIR Summit 2015
- Network Disasters: Incident Response When the Bits Hit the Fan - SANS DFIR SUMMIT
- Network Forensics Training Course - SANS Institute - DFIR - FOR572 - Phil Hagen
- SANS DFIR Webcast - APT Attacks Exposed: Network, Host, Memory, and Malware Analysis
- SANS DFIR Webcast - APT Investigations -- How To The Forensic Side
- SANS DFIR Webcast -- Cache Me If You Can!
- SANS DFIR Webcast - Incident Response Event Log Analysis
- SANS DFIR Webcast - Memory Forensics for Incident Response
- SANS DFIR WEBCAST - Protecting Privileged Domain Accounts during Live Response -
- SANS DFIR WebCast - Virtualization Incident Response & Forensics:
- SANS Digital Forensics and Incident Response (DFIR) NetWars