Build cyber prowess with training from renowned experts

Multiple training options to best fit your schedule and preferred learning style

Hands-On Simulations

Hands-on learning exercises keep you at the top of your cyber game

Training Events & Summits

Expert-led training at locations around the world

Demonstrate cybersecurity expertise with GIAC certifications

Free Training Events

Upcoming workshops, webinars and local events

Workforce Security and Risk Training

Harden enterprise security with end-user and role-based training

Explore common cyber career paths and the training that aligns with each

Featured CourseView All Courses

SEC504: Hacker Tools, Techniques, and Incident Handling

SEC504Offensive Operations

SEC504: Hacker Tools, Techniques, and Incident Handling

View course details Register

Get a free hour of SANS training

Experience SANS training through course previews.

Chart your path to job-specific training courses

Give your cybersecurity career the right foundation for success

Find the courses and certifications that align with our current or desired role

Training designed to help security leaders reduce organizational risk

By Skills Framework

Explore how SANS courses align with leading cybersecurity skills frameworks including NICE, ECSF and DoD 8140

Degree and Certificate Programs

Gain the skills, certifications, and confidence to launch or advance your cybersecurity career.

By Skills Roadmap

Find the right training path based on critical skills

FeaturedView all Focus Areas

Cloud Security Training

Can't find what you are looking for?

Let us help.

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders

Join the SANS Community

Become a member for instant access to our free resources.

For Organizations

Mission-focused cybersecurity training for government, defense, and education

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Talk with an expert

Talk with an expert

Mass Triage Part 6: Processing Returned Files – RecentFileCache

Sep 09 2018

Check this blog post out

Authored bySANS Institute

RecentFileCache Introduction

The RecentFileCache.bcf located in C:\Windows\AppCompat\Programs contains recently executed programs on Windows 7 systems. Corey Harrel has a nice write-up on what the RecentFileCache.bcf is and how it is used by Windows at http://journeyintoir.blogspot.com/2013/12/revealing-recentfilecachebcf-file.html.

Meet the expert

SANS Institute

Launched in 1989 as a cooperative for information security thought leadership, it is SANS’ ongoing mission to empower cyber security professionals with the practical skills and knowledge they need to make our world a safer place.

Read more about SANS Institute