Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

SANSFIRE 2025

  • Mon, Jul 14 - Sat, Jul 19, 2025
  • 48 Courses
  • 2 Tournaments
  • English
Washington Hilton & Virtual (ET)
1919 Connecticut Avenue, N.W., Washington D.C. 20009
Washington, DC, Lake and Pink Trees

Limited Time Cyber-Pro Pass

Join us in Washington, D.C at SANSFIRE and unlock special savings when you register to attend in-person. A $3,240 value!* Unlock the OnDemand Bundle which includes 4-months of course and lab learning access after your training with live SME support. Plus, free access to play in the Core NetWars Tournament during your training week on Thurs, July 17 - Fri, July 18. Compete against your classmates in the ultimate multi-disciplinary cyber range that powers up the most diverse cyber skills. *Offer limited. Available while supplies last.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Training? Contact Sales

Showing 9 of 48
Filter by:

Network Monitoring and Threat Detection In-Depth

Intermediate
SEC503Cyber Defense
SEC503: Network Monitoring and Threat Detection In-Depth
  • GIAC Certified Intrusion Analyst
  • 6 Days
  • 46 CPEs
  • Andrew Laman
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Security Essentials: Network, Endpoint, and Cloud

Essentials
SEC401Cyber Defense
SEC401: Security Essentials - Network, Endpoint, and Cloud
  • GIAC Security Essentials
  • 6 Days
  • 46 CPEs
  • Bryan Simon
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Hacker Tools, Techniques, and Incident Handling

Essentials
SEC504Offensive Operations
SEC504: Hacker Tools, Techniques, and Incident Handling
  • GIAC Certified Incident Handler
  • 6 Days
  • 38 CPEs
  • Joshua Wright
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Advanced Incident Response, Threat Hunting, and Digital Forensics

Intermediate
FOR508Digital Forensics and Incident Response
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
  • GIAC Certified Forensic Analyst
  • 6 Days
  • 36 CPEs
  • Carlos Cajigas
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Web App Penetration Testing and Ethical Hacking

Intermediate
SEC542Offensive Operations
SEC542: Web App Penetration Testing and Ethical Hacking
  • GIAC Web Application Penetration Tester
  • 6 Days
  • 36 CPEs
  • Bojan Zdrnja
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Network Penetration Testing and Ethical Hacking

Intermediate
SEC560Offensive Operations
SEC560: Enterprise Penetration Testing
  • GIAC Penetration Tester
  • 6 Days
  • 36 CPEs
  • Jon Gorenflo
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Implementing and Auditing CIS Controls

Intermediate
SEC566Cybersecurity Leadership
LDR553: Cyber Incident Management
  • GIAC Critical Controls Certification
  • 5 Days
  • 30 CPEs
  • Brian Ventura
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $7,650 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to:Virtual

Reverse-Engineering Malware: Malware Analysis Tools and Techniques

Advanced
FOR610Digital Forensics and Incident Response
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
  • GIAC Reverse Engineering Malware
  • 6 Days
  • 36 CPEs
  • Lenny Zeltser
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Introduction to Cyber Security

Beginner
SEC301Cyber Defense
SEC673: Advanced Information Security Automation with Python
  • GIAC Information Security Fundamentals
  • 5 Days
  • 30 CPEs
  • Rich Greene
  • Starts 14 Jul 2025 at 8:30 AM ET
  • $7,650 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details

Featured Speakers

Schedule

Bonus Session

Engage in extra learning and activities during SANS events.

NetWars Tournaments

Hands-on competitions to test and sharpen your cybersecurity skills.

Social & Community Events

Network and collaborate with cybersecurity professionals.

Showing 1 of 11
Filter by:

SANSFIRE 2025 Welcome Reception

Kick off your SANSFIRE 2025 experience at the Welcome Reception. Be a part of this kickoff event and join the industry’s most powerful gathering of cybersecurity professionals. Share stories, make connections, and learn how to make the most out of your training this week in Washington, DC. Beverages (adult and otherwise) and bites will be served. Hope to see you there!

06:30PM - 08:00PM EDT
In-Person

SANS Community Night

Join us for a special "Community Night" at SANSFIRE 2025. This gathering is open to all cybersecurity professionals and designed to foster connections across the entire spectrum of our community — from newcomers to seasoned experts.

05:30PM - 06:30PM EDT
In-Person

Internet Storm Center Keynote: Squirrels - Taming AI Distractions for Smarted Security Operations

For security operations, distractions can be dangerous. A “denial of service” against a defender often leads to missed alerts and compromise. The tool must never be the focus but the results the tool provides should determine the value of the tool. AI tools are currently in the “new and cool” phase of the hype cycle. There is no week without a major new AI development. As a result, defenders tend to spend a lot of time trialing new tools and little time properly integrating them into security operations. During this presentation, we interview several defenders to learn what turned out to be just a distraction, or what tools turned out to be a game changer for operations once properly integrated.

06:45PM - 07:45PM EDT
In-Person

SANSFIRE 2025 Presents Women’s Connect: Empower. Inspire. A Networking Reception in Partnership with WiCyS

Join us for an exclusive evening of connection and inspiration at SANSFIRE 2025 Women’s Connect, hosted in partnership with Women in CyberSecurity (WiCyS). This special gathering is open to SANS students and members of the local cybersecurity community — from CISOs to early-career practitioners.

05:30PM - 06:30PM EDT
In-Person

SANSFIRE 2025 Honeypot Workshop

Speakers: Internet Storm Center Handlers, Guy Bruneau and Jesse La Grew

Become part of the largest, oldest, and most open sensor network on the internet. Learn how to build, configure, and operate your very own honeypot. We will provide up to twenty honeypots free on a first-come basis. You are also welcome to bring your own Raspberry Pi, n100, or similar system (or cloud account).

This is a hands-on session and requires some familiarity with Linux. Once deployed, the three honeypots submitting data most consistently for the first three months will have a yet-to-be-announced prize.

06:00PM - 07:00PM EDT
In-Person

SANS@Night: Back to Basics (and Having a Blast): Why Cybersecurity Fundamentals Still Rule in a High-Tech World

Buckle up for a lively ride through the wild world of cybersecurity! Sure, today’s tech landscape is all about AI, quantum computing, and other fancy buzzwords that make your head spin but guess what? None of that cutting-edge stuff means squat if you’re ignoring the good old basics. In this upbeat, interactive session, we’ll dive into why the tried-and-true fundamentals (think password hygiene, patch management, and access controls) are the secret sauce to surviving and thriving in the age of ever-evolving cyber threats. Prepare for real-life “oops” moments, plenty of laughs, and hands-on tips you can actually use. This is not your buttoned-up, corporate snooze-fest: you’ll leave inspired, empowered, and ready to fortify your digital defenses with good vibes and rock-solid basics. Let’s have some fun getting back to what really matters!

06:00PM - 07:00PM EDT
In-Person & Virtual

Tournament: Core NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Core NetWars: The most comprehensive of the NetWars ranges, this ultimate multi-disciplinary cyber range powers up the most diverse cyber skills. This range is ideal for advancing your cybersecurity prowess in today's dynamic threat landscape. The winning team and the top five solo players from every Core NetWars tournament throughout the year are offered a chance to compete in the annual SANS Core NetWars Tournament of Champions.

06:30PM - 09:30PM EDT
In-Person

Tournament: Cyber Defense NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Cyber Defense NetWars: Focused on preventing, analyzing, and defending against complex real-world attack scenarios, including brute-force attacks and ransomware campaigns.

07:15PM - 10:15PM EDT
In-Person

SANS@Night: Unlocking Secrets: Keypad Safe Attack Using Side-Channel Timing And Pulseview

In this demo of hardware hacking, we'll introduce PulseView - the 'Wireshark of hardware hacking' - and demonstrate a technique to unlock a keypad safe. Our method? A Side-Channel Timing Attack, which relies on the timing discrepancies in the user interface.

Using an affordable logic analyzer (priced under $15), we'll capture microsecond changes in response times tied to incorrect passcodes. By leveraging this side-channel data, we will carefully decipher the true passcode of the safe. Unique Approach: Traditional hacking often focuses on software vulnerabilities to exfiltrate sensitive data.

In this demonstration, we will show how the timing of system responses can leak data without any traditional vulnerabilities. This approach emphasizes the power and subtlety of side-channel attacks in extracting valuable information. Insights for Attendees: Understand how a side-channel timing attack works to reveal sensitive data.

Learn about the key functionality of logic analyzers and the PulseView software, often called the 'Wireshark of hardware hacking.' Gain practical knowledge on how to utilize changes in response time to recover the passcode of a keypad safe. Join us for this insightful session to explore the intricacies of hardware hacking and enhance your cybersecurity skill set with real-world applications and techniques.

06:00PM - 07:00PM EDT
In-Person & Virtual

Tournament: Core NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Core NetWars: The most comprehensive of the NetWars ranges, this ultimate multi-disciplinary cyber range powers up the most diverse cyber skills. This range is ideal for advancing your cybersecurity prowess in today's dynamic threat landscape. The winning team and the top five solo players from every Core NetWars tournament throughout the year are offered a chance to compete in the annual SANS Core NetWars Tournament of Champions.

06:30PM - 09:30PM EDT
In-Person

Tournament: Cyber Defense NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Cyber Defense NetWars: Focused on preventing, analyzing, and defending against complex real-world attack scenarios, including brute-force attacks and ransomware campaigns.

07:15PM - 10:15PM EDT
In-Person

Washington Hilton

Hotel Special Rates & Reservations

A special discounted rate of $207.00 S/D plus applicable taxes will be honored based on space availability. When booking through the links below, the $25 daily resort fee will be waived. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

These rates include Internet in your room, complimentary access to the fitness center, and are only available through Friday, June 20, 2025.

Washington, DC: Hilton

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

People Shaking Hands

Travel Information