Just saw that @attrc is doing a #DFIROnline session in October. That should be a good one.