Rob T. Lee

Rob Lee is the Chief Curriculum Director and Faculty Lead at SANS Institute. Lee has over 25 years of experience as an expert in digital forensics, vulnerability and exploit discovery, intrusion detection, and incident response. He also is currently appointed as Technical Amici Curiae for the U.S. Foreign Intelligence Surveillance Court. In the past, Lee was a founding member of the Air Force’s first cyber warfare unit, the 609th Information Warfare Squadron. He led nation-state intrusion analysis in the Air Force Office of Special Investigations before working for the government in Title 10/50 Offensive Operations and at Mandiant. Lee is most well-known for his teaching at the SANS Institute. He co-authored two of the top five SANS courses - FOR500: Windows Forensic Analysis and FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics. Lee was inducted into the Forensic 4:cast DFIR Hall of Fame in 2020 and is known as “The Godfather of DFIR.”