DFIR -- Incident-Response, Malware Analysis, Digital Forensics Professionals in the SANS Community


About DFIR
English (USA)

This list is intended to provide SANS Alumni with access to a forum to ask questions related to Digital Forensics, Incident Response, and Reverse Engineering Malware. SANS is dedicated to helping build communities. The digital forensics community is a growing field and it is useful to help grow your knowledge that you invested so much of your time into.

The mailing list is also a perfect place to send out messages for job announcements that are DFIR related. We know how hard it is to find decent individuals who can perform forensics or incident response. We fully endorse the list to be used as a way for those looking to hire someone skilled to their team. Our only requirement is that the posting must be done by a DFIR professional who works in the field, not a recruiter. That way the individual can reach out to the job poster asking specific questions about the job.
Another list guideline that we follow. The list is not intended to push commercial products or services. It is ok to link your website to your signature at the bottom of a good question or reply. It is also ok and encouraged to announce free webcasts, tools, utilities, and content from your organizations as well.

To see the collection of prior postings to the list, visit the DFIR Archives. (The current archive is only available to the list members.)

Using DFIR
To post a message to all the list members, send email to dfir@lists.sans.org.

You can subscribe to the list, or change your existing subscription, in the sections below.

Subscribing to DFIR

Subscribe to DFIR by filling out the following form. You will be sent email requesting confirmation, to prevent others from gratuitously subscribing you. This is a hidden list, which means that the list of members is available only to the list administrator.

    Your email address:  
    Your name (optional):  
    You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext.

    If you choose not to enter a password, one will be automatically generated for you, and it will be sent to you once you've confirmed your subscription. You can always request a mail-back of your password when you edit your personal options.
    Pick a password:  
    Reenter password to confirm:  
    Which language do you prefer to display your messages? English (USA)  
    Would you like to receive list mail batched in a daily digest? No Yes
DFIR Subscribers
(The subscribers list is only available to the list administrator.)

Enter your admin address and password to visit the subscribers list:

Admin address: Password:   

To unsubscribe from DFIR, get a password reminder, or change your subscription options enter your subscription email address:

If you leave the field blank, you will be prompted for your email address

DFIR list run by noc at sans.org, rlee at sans.org
DFIR administrative interface (requires authorization)
Overview of all lists.sans.org mailing lists

Delivered by Mailman
version 2.1.18
Python Powered GNU's Not Unix