Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

Phil Hagen

FellowPrincipal Information Security Researcher at Red Canary

Specialities

Digital Forensics and Incident Response

Connect with Phil

Phil Hagen

About Phil Hagen

Phil has covered deep technical tasks, managed an entire computer forensic services portfolio, and handled executive responsibilities. He's supported systems that demanded 24x7x365 functionality, managed a team of 85 computer forensic professionals in the national security sector, and provided forensic consulting services for law enforcement, government, and commercial clients. He is also the course lead and author of FOR572: Advanced Network Forensics and Analysis and the DFIR strategist at Red Canary, where he supports the firm's community engagement team.

Press & Media

Tools and Publications

  • SOF-ELK SOF-ELK® is a “big data analytics” platform focused on the typical needs of computer forensic investigators/analysts and information security operations personnel. The platform is a customized build of the open source Elastic stack to make large scale analysis easier.
  • Github