SANS Ransomware Summit 2025

Ransomware attacks are widespread because they are highly profitable and effective for cybercriminals. Many organizations are unprepared for such attacks, leading to serious financial and operational damage. The SANS Ransomware Summit brings together cybersecurity professionals to share insights on preventing, detecting, and recovering from ransomware.

The Ransomware Summit will explore these topics:

• Ransomware intrusion emulation
• Ransomware initial access vectors
• Defending against and responding to ransomware
• Tools and techniques for hunting ransomware operators
• The ransomware operator's toolbox - what tools and malware they use
• The ransomware affiliate model/Ransomware as a Service ecosystem
• Ransomware beyond encryption - double extortion, exfiltration of information, Denial of Service threats
• The financial side of ransomware - cryptocurrency tracking
• Recovering from ransomware

A One-of-a-Kind Virtual Networking Experience
In addition to an entire day of ransomware talks and discussions, this Live Online event offers exclusive access to connect with others in the ransomware community, leading experts and investigators, and some of the SANS instructors and authors you have taken courses from. In addition to in-depth presentations and panels, you will also be invited to join the conference chat workspace which is a place to engage with attendees and speakers, to ask your questions, and to share your knowledge.