Training
Featured CourseView All Courses
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
Cloud Security Training
Can't find what you are looking for?

Let us help.

Contact us
Resources
SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

CISO Network

Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert
Talk with an expert

SANS DFIRCON Miami 2025

  • Sun, Nov 16 - Sat, Nov 22, 2025
  • 15 Courses
  • 1 Tournament
  • English
Hyatt Regency Coral Gables & Virtual (ET)
50 Alhambra Plaza, Coral Gables, FL 33134
Coral Gables, Trolley and Large Building
Jump to:

Hands-On Cyber Security Training in Miami

Enhance your cybersecurity skills at SANS DFIRCON Miami 2025 (November 16-22, ET). Join us for a premier cybersecurity event led by top industry course authors known for their deep expertise and practical approach.

Pre-Event Community Learning Day - Sunday, Nov 16

Join us for a unique, FREE pre-event session at DFIRCON, featuring hands-on tutorials with open-source tools led by top cyber experts in the DFIR community. These sessions are designed to enhance your investigative skills through practical, expert-led training. Don't miss this opportunity to gain valuable knowledge and prepare for the training week ahead.

Agenda Coming Soon!

SANS Live Training

Ten Reasons to Attend SANS DFIRCON Miami 2025

  1. Community Learning Day: Join us before DFIRCON begins for an exclusive, in-person day dedicated to enhancing cybersecurity skills. Learn directly from industry-leading experts through interactive tutorials on the latest open-source cybersecurity tools. This session is designed to provide hands-on experience, equipping you with practical skills and insights from some of the top professionals in the industry.
  2. Actionable Cybersecurity Training: Benefit from training directly with the authors of each course. This setup ensures you receive the most practical and actionable insights, enabling you to apply new knowledge immediately in your workplace.
  3. On-the-Spot Support: Enjoy continuous support throughout your course from certified teaching assistants. This immediate help ensures you can fully grasp and apply your learning as you go.
  4. Virtual Immersive Labs: Dive into hands-on practice within a secure virtual environment.
  5. Leadership Talks & Workshops: Participate in targeted talks and workshops led by industry leaders, focusing on pivotal training topics critical in today’s cybersecurity landscape.
  6. NEW! DFIR NetWars Tournament: Test your skills in the new SANS DFIR NetWars tournament—an interactive, engaging learning experience designed to enhance your DFIR capabilities. Participation is free with your class registration.
  7. In-Depth Course Materials: Gain access to comprehensive, dual-format courseware—both electronic and printed—created by the experts themselves. This material serves as a valuable resource both during and after the event.
  8. GIAC Certification: Several courses align with GIAC certifications, representing the highest standard in cybersecurity qualifications.
  9. Extended Post-Event Access: After the event, enjoy four months of access to the recorded lectures, allowing you to review and deepen your understanding at your own pace.
  10. Convenient Venue: Courses will be held at the beautiful, Hyatt Regency Coral Gables.

Whether you're a seasoned professional or new to the field, SANS DFIRCON Miami 2025 equips you with the skills and knowledge needed to navigate the ever-evolving threat landscape.

Students Say

Slide 1 of 0
Early Bird Offer

Save 500 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses) by August 17, 2025.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Sales

GIAC Certification Exam Attempt

2 Free practice tests when you add a certification exam attempt to your course. Available for select courses below.

OnDemand Access

Add 4 months of OnDemand access to your course purchase. Only available for courses with an OnDemand option.

Showing 9 of 15
Filter by:

Security Essentials: Network, Endpoint, and Cloud

Essentials
SEC401Cyber Defense
SEC401: Security Essentials - Network, Endpoint, and Cloud
  • GIAC Security Essentials
  • 6 Days
  • 46 CPEs
  • Ross Bergman
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Hacker Tools, Techniques, and Incident Handling

Essentials
SEC504Offensive Operations
SEC504: Hacker Tools, Techniques, and Incident Handling
  • GIAC Certified Incident Handler
  • 6 Days
  • 38 CPEs
  • James Leyte-Vidal
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Advanced Incident Response, Threat Hunting, and Digital Forensics

Intermediate
FOR508Digital Forensics and Incident Response
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
  • GIAC Certified Forensic Analyst
  • 6 Days
  • 36 CPEs
  • Marcus Guevara
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Reverse-Engineering Malware: Malware Analysis Tools and Techniques

Advanced
FOR610Digital Forensics and Incident Response
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
  • GIAC Reverse Engineering Malware
  • 6 Days
  • 36 CPEs
  • Evan Dygert
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Windows Forensic Analysis

Essentials
FOR500Digital Forensics and Incident Response
FOR500: Windows Forensic Analysis
  • GIAC Certified Forensic Examiner
  • 6 Days
  • 36 CPEs
  • Ovie Carroll
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Smartphone Forensic Analysis In-Depth

Major UpdatesEssentials
FOR585Digital Forensics and Incident Response
FOR585: Smartphone Forensic Analysis In-Depth
  • GIAC Advanced Smartphone Forensics
  • 6 Days
  • 36 CPEs
  • Domenica Crognale
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

Advanced
FOR572Digital Forensics and Incident Response
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
  • GIAC Network Forensic Analyst
  • 6 Days
  • 36 CPEs
  • Philip Hagen
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Mac and iOS Forensic Analysis and Incident Response

Intermediate
FOR518Digital Forensics and Incident Response
FOR518: Mac and iOS Forensic Analysis and Incident Response
  • GIAC iOS and macOS Examiner
  • 6 Days
  • 36 CPEs
  • Sarah Edwards
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Cyber Threat Intelligence

Intermediate
FOR578Digital Forensics and Incident Response
FOR578: Cyber Threat Intelligence
  • GIAC Cyber Threat Intelligence
  • 6 Days
  • 36 CPEs
  • Peter Szczepankiewicz
  • Starts 17 Nov 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:In-PersonVirtual

Featured Speakers

Ross Bergman

Ross Bergman

After a malicious attack in his lab, Ross pivoted from neuroscience to cybersecurity, driven by a passion for safeguarding digital assets. He has dedicated over three decades to fortifying enterprise defenses and mentoring future cyber leaders.

Learn more
Ovie Carroll

Ovie Carroll

Director

For Ovie Carroll, digital forensics is all about the hunt for evidence in digital places that are hiding critical clues, followed by deep analysis to prove something that the evidence was never intended to prove.

Learn more
Jim Clausing

Jim Clausing

Technical Consultant, Network Security Architect

Jim has been in the IT since 1981. His expertise ranges from systems and database administration to security and research in parallel processing and distributed systems.

Learn more
Domenica Crognale

Domenica Lee Crognale

Cyber Security Engineer

Domenica has revolutionized mobile device forensics through her 15-year tenure supporting U.S. federal law enforcement and intelligence agencies and leading global training for elite units including the FBI and military special forces.

Learn more

Mari DeGrazia

Certified Instructor

Mari DeGrazia loves the satisfaction of solving a good puzzle. That fascination paired with her technical abilities has made digital forensics the perfect career fit. "There is nothing like the adrenaline rush of figuring out a tough case when you find that smoking gun or vital clue that will help solve it," she says.

Learn more
Evan Dygert

Evan Dygert

Principal Scientist

Evan's career of 30+ years has spanned a variety of digital fields including software development, computer networking and security, and more recently, digital forensics.

Learn more

Schedule

Bonus Session

Engage in extra learning and activities during SANS events.

Course Training

Daily required course training hours throughout the week.

NetWars Tournaments

Hands-on competitions to test and sharpen your cybersecurity skills.

Showing 1 of 2
Filter by:

Tournament: DFIR NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About DFIR NetWars: Focused on digital forensics, incident response, threat hunting, and malware analysis, this tool-agnostic approach covers everything from low-level artifacts to high-level behavioral observations.

06:30PM - 09:30PM EST
In-Person

Tournament: DFIR NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About DFIR NetWars: Focused on digital forensics, incident response, threat hunting, and malware analysis, this tool-agnostic approach covers everything from low-level artifacts to high-level behavioral observations.

06:30PM - 09:30PM EST
In-Person

Hyatt Regency Coral Gables

Hotel Special Rates & Reservations

A special discounted rate of $245.00 S/D plus applicable taxes will be honored based on space availability.

A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

These rates include:

  • Internet in your room
  • Complimentary access to the fitness center, pool area, jacuzzi, and sauna

These rates are only available through Friday, October 24, 2025.

The $25 daily destination fee is waived for SANS attendees who book through the links below.

An on-site raffle will be held during the event to award a SANS attendee who booked their room in the hotel block 5,000 World of Hyatt points! Hotel rooms need to be reserved through the booking link above to qualify.

Book A Regular ReservationBook A Government Per Diem Reservation
Coral Gables, Hyatt Regency

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

People at laptops smiling

Travel Information

test

Hyatt Regency Coral Gables

Embrace alluring Mediterranean culture at Hyatt Regency Coral Gables. With a striking two-story marble lobby, antique accents, and Spanish-style windows, retreat to this tranquil refuge just off the popular Miracle Mile. There’s no better place from which to explore the nearby Art Deco District, Miami Beach, and Coconut Grove.

Hotel Check In
View Hotel

Venue Parking Details

- Self-Parking: 4-8 hours: $20.00, 6-8 hours: $30.00, Overnight: $40.00 - Valet Parking: Overnight: $46.00 Rates subject to change. Please contact the venue for the most up to date information. Alternative Parking Options - SANS recommends researching nearby parking facilities for more affordable options. Below are some popular parking apps that can help you locate and reserve space during your training are SpotHero, ParkMobile, and ParkWhiz. Distances from Nearby Airports - Miami International Airport (MIA): Approximately 4.5 miles - Fort Lauderdale-Hollywood International Airport (FLL): Approximately 29.5 miles

Airport, Plane, & Luggage
Google Maps

Save on United Flights To Live Events

The discount ranges from 1% - 10% depending on the origin airport. When making the flight reservation, use the code - 'ZQ33173387'. Please Note: This discount applies to flights with United Airlines and other codeshare airlines and does not apply to basic economy fares. Call the United Meetings Reservation Desk at (800) 426-1122 for booking assistance.

United
Book Your Flight

Save on Delta Flights To Live Events

Delta Air Lines is pleased to offer special flight discounts for SANS Institute customers!  Depending on fare type, domestic discounts range from 2- 10%. Use Meeting Event Code 'NM47F' during booking.  You may also call Delta Meeting Network® at 1.800.328.1111* Monday-Friday, 8:00 a.m.- 6:30 p.m. (EST)  *Please note there is not a service fee for reservations booked and ticketed via the reservation 800 number. Discounts valid on Delta and applicable Codeshare flights.

Delta
Book Your Flight