SANS DFIR

@sansforensics · joined 28 Feb 2009

The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.

111 789Followers

104Following

33 221Posts total

19.7KViews on collected posts

Against accounts of the same size

5 posts from the last 90 days, next to the 100K–1M follower range. shown widely, but few of those viewers react.

Median views3 207this account4 198median for 100K–1M

Reach, %2.87%this account1.62%median for 100K–1M

Engagement, %0.87%this account1.35%median for 100K–1M

Metric	This account	Median for 100K–1M	Ratio
Median views per post	3 207	4 198	0.76×
Reach (views ÷ followers)	2.87%	1.62%	1.77×
Engagement rate	0.87%	1.35%	0.65×

Others in this range → Compare with another account → How these benchmarks are built →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

2.9K18 Aug

6.7K28 Aug

2.8K1 Sep

3.2K3 Sep

4.1K4 Sep

Last 5 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.37%18 Aug

1.66%28 Aug

0.68%1 Sep

0.87%3 Sep

1.34%4 Sep

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 1.35%.

What the audience does

Likes50.0%182 in total

Reposts10.7%39 in total

Replies0.8%3 in total

Bookmarks38.5%140 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Latest posts

Chain of custody doesn't end in the cloud. @megan_roddie explains when to analyze in the cloud, when to export, and how to protect forensic integrity. Read the blog: https://t.co/ZJZTUxdqNo #DigitalForensics #CloudSecurity https://t.co/YKpn97eo1Y 4.1K views · 43 likes · 12 reposts · 0 replies 04 Sep 2026 · Open on X →

AI adoption in DFIR is outpacing governance. SANS DFIR released two AI frameworks, one for Digital Forensics (SWGDE-aligned) and one for Incident Response (NIST CSF 2.0-aligned). Built by @HeatherMahalik, DFIR Curriculum Lead at SANS Institute. #DFIR #AI https://t.co/9YDcQrsouG 3.2K views · 23 likes · 3 reposts · 2 replies 03 Sep 2026 · Open on X →

Sometimes #Ransomware groups expose their own playbook. See what leaked data from The Gentlemen reveals about attacker tools, TTPs, victimology, and opportunities for disruption. Read the blog from @maridegrazia: https://t.co/iaA1xDTfe2 #CTI #DFIR https://t.co/dT1vMOYjUE 2.8K views · 15 likes · 3 reposts · 1 replies 01 Sep 2026 · Open on X →

#AI is already in #DFIR workflows. The governance usually isn't. SANS DFIR released two AI frameworks, one for Digital Forensics and one for Incident Response, showing where AI helps, where humans stay in control, and where it should never be trusted. https://t.co/JsunlsNx5Y htt 6.7K views · 91 likes · 20 reposts · 0 replies 28 Aug 2026 · Open on X →

Every investigation leaves a lesson behind. Join us for the SANS #DFIR Summit to hear practitioners share real investigations, technical tradecraft, and practical lessons you can put to work immediately. 📅 Oct. 15–16 | Arlington, VA https://t.co/dNYlJZmJA5 https://t.co/32PM4eq 2.9K views · 10 likes · 1 reposts · 0 replies 18 Aug 2026 · Open on X →