🐧 Hunting threats on Linux? Come learn it right. I'm teaching FOR577 at SANS Austin, June 22–27 — IR, threat hunting, and GLIR cert prep. Early-bird ends May 7! 🍖🎸 👉 sans.org/cyber-security-trai… #SANS #FOR577 #DFIR #Linux

Hunting Linux threats in sunny San Diego? 🌴🐚 I’m running #FOR577 LINUX Incident Response & Threat Hunting at #SANSSecWest 2026 in May with @sansforensics — hands-on labs, real-world IR, and threat hunting to level up your Linux DFIR game on the world’s favorite server OS.

This came today #donorforlife – at Pickerington, OH

2 more days to get the early-bird discount for one of my all-time favorite conferences, #SANS #DFIRCON in Miami in Nov. There are a bunch of hands-on workshops on Sun, 16 Nov, lots of evening events during the week #FOR577 my last in 2025. @sansforensics sans.org/cyber-security-cour…

Linux touches every part of our networks. Our routers, switches, and firewalls likely run some flavor of Linux or Unix. Join me in London in July for the newly updated #SANS #FOR577 where we'll learn how to investigate attacks on Linux systems. sans.org/cyber-security-trai…

Join me in one of my favorite places for the updated FOR577. Now, with more BTRFS, more rootkits, and more Linux attacks. #FOR577 #SANSSecWest @sansforensics

I just posted a Handler's Diary, I've released a python script to find Linux files with the immutable bit set. #FOR577 @sans_isc @sansforensics isc.sans.edu/diary/New+tool+…

Another great class and 2 more brand new lethal forensicators! Congratulations Takuya and Ryo! @SANSInstitute @sansforensics #FOR610 #malware

This was hanging out in my yard when I got up today