Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

A Visual Summary of SANS DFIR Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS DFIR Summit 2024

Authored byAlison Kim
Alison Kim

On August 22-23, attendees in Salt Lake City, Utah and thousands from around the globe tuned in for the SANS DFIR Summit. Top practitioners and global experts shared actionable ideas, methods, and techniques to overcome obstacles, discover the latest open-source forensic tools, and connect with leading DFIR professionals.

We invited Ashton Rodenhiser of Mind's Eye Creative to create graphic recordings of our Summit presentations. If you missed a talk or are looking to view the SANS DFIR Summit through a visual lens, take a look at the recordings below.

*If you registered for the Summit, video recordings will be available on your Summit Access page in your SANS Portal next week!

How persistent is an APT? Battling Three Threat Actors in a Single Environment

Amnon Kushnir, Director of Incident Response, Sygnia

01_SANS_DFIR_Biderman_Kushnir_WebVersion.jpg

Cutting Through the Chaos: File Detection and Analysis Using Strelka

02_SANS_DFIR_Hutelmyer_WebVersion.jpg

The Allure of The Hunt: Drawing New Talent Into DFIR

03_SANS_DFIR_McClellan_WebVersion.jpg

Gaining Better Visibility on a Cloudy Day: Additional Microsoft Cloud Data Sets You May Not Be Looking At But Probably Should

04_SANS_DFIR_Stoner_WebVersion.jpg

Dormant Devices, Chatty Logs: Extracting Forensic Artifacts from Seemingly Idle iOS Devices

Nick Dubois, Mobile Vulnerabilty Researcher , Hexordia

05_SANS_DFIR_Quezada_Dubois_WebVersion.jpg

Not All Androids Who Wonder Are Lost. Exploring Android's Find My Device System.

06_SANS_DFIR_Hickman_WebVersion.jpg

Getting down and dirty with Mac imaging

07_SANS_DFIR_Dym_WebVersion.jpg

Forensic Analysis of Compromised VPN Appliances by Advanced Actors

Matt Lin, Senior Consultant, Incident Response, Mandiant

08_SANS_DFIR_Tomlinson_Lin_WebVersion.jpg

Keynote | Days of Future Past: The Impacts of GenAI on Cybersecurity

09_SANS_DFIR_Lee_WebVersion.jpg

Cloud Kleptos: Lessons Learned Responding to Scattered Spider

10_SANS_DFIR_Morina.jpg

Rise of the Drones: Modern Drone Forensic Opportunities

11_SANS_DFIR_Flack_WebVersion.jpg

Ghost in Your Supply Chain

Chung-Kuan Chen, Security Research Director , CyCraft Technology Corp

12_SANS_DFIR_Wang_and_Chen_WebVersion.jpg

Leveling Up Ghidra: Learn Ghidra Plugins with a Game Boy Game

13_SANS_DFIR_Latonis_WebVersion.jpg

The SaaS-y Side of Incident Response

14_SANS_DFIR_Craig_WebVersion.jpg

The Tortured Responders Department: Scott & Rebekah's Version

Rebekah Brown

15_SANS_DFIR_Roberts_and_Brown_WebVersion.jpg

Llama: The Fast File Processor With No Drama

Julia Paluch, Software Developer, Aon Cyber Solutions

16_SANS_DFIR_Stuart_and_Paluch_WebVersion.jpg

If you'd like to check out our other upcoming Summits, you can view the latest listing here.

A Visual Summary of SANS DFIR Summit 2024