Special guests:

Rob Lee, Chief Curriculum Director and Faculty Lead at SANS Institute

Rob is a small business owner in Boston, MA specializing in information security, threat hunting, incident response, and digital forensics. Rob is also the curriculum lead for digital forensic, incident response, and threat hunting training and programs at the SANS Institute.

Rob has more than 20 years of experience in computer forensics, incident response, threat hunting, vulnerability and exploit discovery, and intrusion detection/prevention. Over his career, Rob has worked on both offensive and defensive cyber operations supporting multiple organizations and agencies in and out of uniform.

Phil Hagen, Digital Forensics and Incident Response Curriculum Lead at SANS Institute


Phil engages with current and future customers of Red Canary’s managed threat detection service to ensure their use of the service is best aligned for success. Through a solid understanding of customers’ requirements and environments, he guides Red Canary to be best suited to minimize the risks associated with future threats.

Phil has 15 years of experience in the information security world run the gamut from deep technical tasks to P&L responsibility for an entire computer forensic portfolio. Phil is a SANS Institute Certified Instructor, as well as the course lead for SANS FOR572: Advanced Network Forensics and Analysis.

Lee Whitfield, Digital Forensic Investigator
Lee is a digital forensic investigator with over a decade of experience in the field. During this time, he conducted many investigations for both criminal prosecution and defense, and private clients. As part of his responsibilities, Lee has appeared in court to testify on several occasions.

His most significant achievements in the field to date are:

1) Reverse Engineering of Microsoft Volume Shadow Copies

2) Establishing and Presenting the Annual Forensic 4:cast Awards

The Forensic 4:cast Awards event is the only vendor-neutral award ceremony for digital forensics organizations and individuals. The awards were started in 2009 and, since then, Lee has been asked to attend the SANS Forensic Summit each year to host the awards show.

He hosts the popular digital forensics podcast, Forensic 4cast. “This is very rewarding,” Lee says, “as I am able to meet and learn from others in the field. It also has afforded me the opportunity to discuss important issues relating to the field of digital forensics.”

In this episode, the trio will discuss the SANS Digital Forensics and Incident Response (DFIR) Summit (#DFIRSummit). It is the most comprehensive DFIR event of the year, bringing together a passionate and influential group of experts, cutting edge research and tools, immersive training, and industry networking opportunities.

The industry’s top practitioners will share their latest digital forensics and incident response research, solutions, tools, and case studies. Closely aligned SANS DFIR live-online courses enhance your knowledge base and add to your toolkit with a hands-on, immersive course taught by top SANS instructors and course authors.

Who Attends?

Every year, forensic and incident response professionals from around the world attend the SANS DFIR Summit to learn how to overcome their latest obstacles, discover the latest open-source forensic tools, share methods and strategies proven effective in their investigations, and learn from the top DFIR practitioners in the industry.

A key benefit is that you’ll have the opportunity to network with other like-minded DFIR professionals. If you work in digital forensics or incident response, the SANS DFIR Summit is the must-attend event of the year.

Listen to the podcast to find out more.

Share this post