Evan Dygert

A lot has changed since the mid 1980's, but one thing that has remained is Evan Dygert's commitment to the digital world. Evan's career of 30+ years has spanned a variety of digital fields including software development, computer networking and security, and more recently, digital forensics. It is this vast experience that allows Evan to analyze and understand Malware at a fundamental level and share that knowledge with his students.

Evan first applied his focus to digital forensics back in 2003 when his young daughter's browser was hacked. He immediately took an active role in defending against malicious actors at home, and along the way got hooked on digital forensics. As Evan learned more and more about the security field and its sub-specialties, he realized there was an endless world to explore. Today, Evan is a consultant with Dygert Consulting, offering expert consulting and computer forensic services. He is also a senior security engineer with Blue Cross Blue Shield Association. 

When he's not at his day job, Evan is a SANS instructor, teaching FOR10: Reverse-Engineering Malware: Malware Analysis Tools and Techniques, where he shows his class how to implement solid problem-solving approaches with specific malware samples. Evan's classes are interactive and conversational, always with the goal of gaining student understanding. He adjusts the focus of each class to the specific needs of the students attending that session.  In addition to FOR610, Evan teaches SEC503: Intrusion Detection In-DepthSEC504: Hacker Tools, Techniques, Exploits, and Incident Handling and FOR508: Advanced Digital Forensics, Incident Response & Threat Hunting.

A life-long learner himself, Evan stresses the need for continued learning and skill advancement to his students as well. "There are many sources of information to help with improving malware analysis skills," he says. "I share these sources with the class, so they know where to go to continue improving their skills."

Evan's work in digital forensics, computer security and expert witness work has allowed him to write expert reports, affidavits, and testify in depositions, federal hearings and a trial. He also mentors local high school CyberPatriot teams, which have gone to the CyberPatriot National Finals three times.

Fluent in Mandarin Chinese, Evan is also experienced in many computer languages including Java, Pascal, C/C++, assembly language, and Python. He has presented at BSides Orlando, SANS@Night, OWASP AppSec USA and the (ISC)2 Security Congress, and has earned 18 GIAC certifications, including the prestigious GIAC Security Expert (GSE) certification. 

Evan has a bachelor's degree in computer science from Brigham Young University, a master's in business administration from Rollins College, and has completed coursework for a Ph.D. in computer information systems, which he will earn upon completion of his dissertation.

Evan stays busy and working in security doesn't leave much time for hobbies, but in his down time he enjoys traveling, reading and spending time with his wife.  

Qualifications Summary

  • SANS Mentor and Instructor for FOR10: Reverse-Engineering Malware: Malware Analysis Tools and Techniques, SEC503: Intrusion Detection In-Depth, SEC504: Hacker Tools, Techniques, Exploits, and Incident Handlingand FOR508: Advanced Digital Forensics, Incident Resposne & Threat Hunting
  • High school CyberPatriot team mentor, with three national finalist teams
  • Fluent in Mandarin Chinese
  • Experienced in Java, Pascal, C/C++, assembly language, Python and more


  • GIAC Security Expert (GSE) 
  • GIAC Certified Forensic Examiner (GCFE)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Computer Examiner (CCE)
  • Certified Ethical Hacker (CEHv8)
  • GIAC Continuous Monitoring (GMON)
  • GIAC Cyber Security Essentials (GSEC)
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Incident Handler (GCIH)
  • GIAC Penetration Testing (GPEN)
  • GIAC Reverse Engineering Malware (GREM)
  • GIAC Certified Windows Security Administrator (GCWN)
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Assessing and Auditing Wireless (GAWN)
  • GIAC Secure Software Programmer-Java (GSSP-JAVA)
  • GIAC Web Application Penetration Tester (GWAPT)
  • GIAC Advanced Penetration Tester (GXPN)
  • GIAC Python Coder (GPYC)
  • GIAC Cyber Threat Intelligence (GCTI)
  • GIAC Network Forensic Analyst (GNFA)
  • GIAC Defending Advanced Threats (GDAT)
  • GIAC Certified UNIX Security Administrator (GCUX)
  • eLearnSecurity Web Application Penetration Tester (eWPT)
  • eLearnSecurity Network Defense Professional (eNDP)
  • eLearnSecurity Certified Professional Penetration Tester Gold (eCPPT Gold)
  • eLearnSecurity Certified Reverse Engineer (eCRE)

Here's what students are saying about SANS Instructor Evan Dygert:

"Evan is very methodological and easy to follow. Friendly and willing to help." Wayne C., O'Reilly Auto Parts

"Evan is fantastic and keeps the class lively and informative." Stephen S., NASA

"Evan is a real pleasure to be around. His humor, calm demeanor & deep tech knowledge make learning this complex material easy & enjoyable." Anonymous 

"Thanks Evan for the awesome FOR610 training, its unbelievable how you can get that much of knowledge and apply it in 6 days." Ahmed E. Wayfair DE