Investigation is often considered both an art and a science, and practitioners merge these disciplines in the search for the facts in their investigations. While the best tool in both art and science is the amazing capacity of the human brain, and this is especially apparent in the field of digital forensics and incident response, where we match ourselves against the creative ingenuity of committed and capable threat actors; we do need other t...

Technology has done wonders for productivity over the past 20 years, but cybercriminals have improved their own efficiency using the same tools. In just the past three years, attackers have cut the time needed to deploy an attack from months to days using automation and as-a-service technologies. Meanwhile, cybersecurity teams have never had more data to find patterns and stop attacks — yet the time to detect and respond is still measure...

Securing a cloud environment can be challenging and time consuming, especially if you don't know where to start. This Workshop will scrutinize a common cloud service: Virtual Machines, and focus on the secure implementation of that service. We'll discuss Operating Systems (and why it matters from a cloud perspective), as well as security groups, remote access, system and network hardening as well as how mature organizations handle deployments....

Government organizations face threats, like none other. Ensuring that a robust security posture fits inside the regulatory and budget requirements of any agency is a huge feat onto itself. Add on all the threats that adversaries bring to your doorstep, and it can seem like an insurmountable task. From vulnerabilities to zero-days to patch management to user education and enablement, it’s easy for security teams to get lost in “What...

Over the past year, cyber threats have continued to plague organizations of all types. From geopolitical conflicts such as the war in Ukraine to the increased use of social engineering techniques by adversaries, cyber threat intelligence (CTI) professionals have had a challenging time providing actionable intelligence to their consumers. On this webcast, we’ll review insights from this year’s SANS CTI Survey, including both the cha...

The increasing reliance on cloud computing has driven the need for efficient and secure IT environments, necessitating the development of robust engineering skills across various domains. This keynote speech will explore the world of cloud investigations, focusing on the critical intersection of data engineering, infrastructure as code (IaC), and Continuous Integration/Continuous Deployment (CI/CD) pipelines. Attendees will learn about the lat...

As business applications have moved from monolithic blocks of code to distributed collaborations across multiple services, new forms of vulnerabilities have emerged and attackers have taken advantage of them. To explore this topic, SANS conducted a survey to collect information around industry practices in application security, focusing on Application Programming Interface (API) security awareness, processes, and controls. This webcast present...

Learn real-world cyber security skills from top industry experts during SANSFIRE 2023 (July 10-15). Join us In-Person in Washington, DC or Live Online to experience interactive training with hands-on labs, practice your skills during NetWars Tournaments, and network with your peers in real-time. Find the course that best suits your needs today! SANSFIRE 2023 Features: Hands-on labs in a virtual environment Courses include electronic and printe...

In this series, Dean Parsons will review observed ICS attacks in the Oil & Gas, Electric and Water sectors and map them to the MITRE ATT&CK ICS framework. Throughout this series, Dean will review the most common attacker tactics and techniques used across commonly targeted critical infrastructure sectors. In this first part of the series, Dean will specifically speak to the Oil & Gas sector. This webcast will dive into Initial Acce...

The Rise of Public Cloud Providers such as Amazon Web Services (AWS), Google Cloud (GCP), and Microsoft's Azure which serves the computing needs for small, medium and large businesses all over the world and there is no sign of any slowing the move to the “cloud”. These same Public Cloud providers have had at the same time become more complicated each day as we are creating more complex security holes with new cloud services, offeri...