Skip to content
All platforms and ecosystem members

SANS Institute

Training

Cybersecurity training and GIAC certifications; its DFIR curriculum (FOR500, FOR508) is the standard credential path for forensic analysts.

Visit sans.org

Why it is in this ecosystem

Documented as a training in the cloud / ir ecosystem, sourced from public research. The directory documents responders separately from products: a platform here is not a response firm, and a response firm is not a platform.

Cloud estate investigations: AWS, Azure, GCP forensics, containment across accounts, log-driven timelines.

The documented response firms for this environment

Platform buyers end up needing responders: the directory side of VendorQuals carries the evidence-graded firms for cloud / ir.

Browse the Cloud incident response directory →

Sourced from public research and the vendor’s own pages. Ecosystem listings document products and platforms, they are not endorsements and not the verified-responder model the firm directory carries. Have a correction? Submit one →