Enhance your cybersecurity skills at SANS DFIRCON Miami 2024: Special Edition (November 17-23, ET). Join us for a premier cybersecurity event led by top industry course authors known for their deep expertise and practical approach. Pre-Event Community Learning Day - Sunday, Nov 17 This Special Edition of DFIRCON offers FREE & unique pre-event sessions, just before the training week, that include hands-on tutorials using open-source tools c...

Unlock the full potential of your career with cyber security training at SANS Golden Gate 2024 (November 18-23, PT). Guided by world-renowned instructors at the forefront of the field, this event provides exclusive access to live industry experts, ensuring you stay ahead of the curve. Immerse yourself in a learning environment that features industry-leading hands-on labs, simulations, and exercises, all geared towards practical application in...

Hear ye! Hear ye! Be ye free from the CRT! What’s life like anyway without the CRT? What can a program even do without it? As the entire series comes to a close, this part will explore the CRT and how to become independent from it. This independence is critical to understand when it comes to creating binaries that are compiled as PIC; Position Independent Code. This entire 10-part series has over 20 hours of free content that teaches you...

Unlock the full potential of your career with cyber security training at SANS Seattle 2024 (December 2-7, PT). Guided by world-renowned instructors at the forefront of the field, this event provides exclusive access to live industry experts, ensuring you stay ahead of the curve. Immerse yourself in a learning environment that features industry-leading hands-on labs, simulations, and exercises, all geared towards practical application in your p...

Cloud services rapidly evolve as the result of incessant agile software delivery, but so do cloud customers. Previous SANS surveys have identified mergers and acquisitions as a major reason that cloud customers have started using a new cloud service provider and use multiple single sign-on solutions. Leadership changes can create a lack of consistency. Lack of architectural guidance may also leave different teams within a company going off in...

Modern security leaders must deal with an endless barrage of changes to the business, technology, and threat landscape. This requires a combination of technical knowledge, understanding of risk, and the ability to lead teams in times of intense pressure. Doing so requires building a comprehensive program of controls to manage information risk, enhancing cybersecurity governance while ensuring compliance, and dealing with inevitable incidents a...

As cloud security controls mature, it’s common to find that a wide variety of security controls and configuration capabilities are melding into a single platform or service fabric, in addition to the cloud provider infrastructure. Ranging from CNAPP to CSPM to CWPP and beyond, controls that cover the pipeline, workload security, cloud environment configuration, IaC templates, and runtime (and much more) are starting to evolve into a much...

This hands-on workshop supports content from FOR509: Enterprise Cloud Forensics and Incident Response. Join us for an immersive hands-on workshop investigating a sophisticated attack in Google Cloud Platform. Through guided investigation using SOF-ELK, participants will analyze a compromised GenAI application deployment that leads to data exfiltration. Students will learn how organization policies affect attack paths and how to leverage cloud...

In this first session of our detection engineering webinar series, we will discuss what detection engineering really is, how it might be different from what you are currently doing, and what tools we use to implement a detection engineering process. After that is all covered, we'll finish by walking through the entire process with a particular attacker technique and engineering the detections. And if you're wondering if this webcast will it be...

Unlock the full potential of your career with cyber security training at SANS SANS Cyber Defense Initiative 2024 (December 13 - 18, ET). Guided by world-renowned instructors at the forefront of the field, this event provides exclusive access to live industry experts, ensuring you stay ahead of the curve. Immerse yourself in a learning environment that features industry-leading hands-on labs, simulations, and exercises, all geared towards pract...