IT & Cybersecurity

Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines – Dubai, 3–7 May 2027

Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines runs in Dubai from Monday 3 May to Friday 7 May 2027 (1 Week). The fee is 21,450 SAR per participant. The same programme is also scheduled in 1 other city.

Register for this programme Ask a question

Dates
Length
1 Week
Fee per participant
21,450 SAR
Format
In person, Dubai
Venue
Five-star CBD venue
Status
Open for registration
Week
18 of 2027
Reference
468_14381

This session

3–7 May 2027

This Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines session in Dubai runs from Monday 3 May to Friday 7 May 2027 (week 18, Q2 2027). It is the only date in Dubai in 2027, at a fee of 21,450 SAR. Registration is open for this date. It is held in person at Five-star CBD venue.

How do I book this date?

Register online to request your place, or send us a question about this date first.

Reference for this date: 468_14381. Quote it when you contact us.

Before you book, read our cancellation policy.

Let’s talk about your next step.

Questions about this date

When does Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines in Dubai start and finish?

It starts on Monday 3 May and finishes on Friday 7 May 2027: 1 Week.

How much does Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines in Dubai cost?

The fee for this date is 21,450 SAR per participant. Please read our cancellation policy before you book.

Is this date held in person or online?

It is held in person in Dubai, at Five-star CBD venue.

Where else does Memory Forensics and Malware Analysis: Volatility 3, YARA and Windows Timelines run?

It is also scheduled in 1 other city: London.

What does this programme cover?

Memory forensics and malware analysis decide whether an intrusion is scoped correctly or only partly cleaned up. Many response teams still reimage a host before capturing RAM, miss injected code that never touched the disk, and pass vague hashes to the SOC instead of detections that survive a recompile. This Core Concept course gives examiners a repeatable lab routine: acquire volatile data, analyse memory images with Volatility 3, rebuild a Windows timeline and triage suspicious binaries safely in an isolated sandbox. Participants produce a Compromised Host Examination Report and Detection Handover Pack.

The programme outline covers:

  • Introduction
  • Course Objectives
  • Target Audience
  • Course Outline
  • Day 1: DFIR Process, Evidence Integrity and Lab Setup
  • Day 2: Volatile Data Acquisition and Memory Analysis with Volatility 3
  • Day 3: Windows Artefacts and Super-Timeline Analysis
  • Day 4: Malware Triage for Defenders and Detection Content
  • Day 5: Examination Lab Case and the Detection Handover Pack
  • Skills You Will Gain
  • Why Attend This Course
  • Conclusion
Read the full outline on the programme page ↗

Where else does this programme run?

Also scheduled in 1 other city.

More ways to train