SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsResponsible for identifying and assessing the capabilities and activities of cybersecurity insider threats; produces findings to help initialize and support law enforcement and counterintelligence activities and investigations.
Insider Threat Analysts detect insider threats by analyzing behavioral patterns and correlating anomalous activities. They preserve digital evidence, provide intelligence, and coordinate strategic responses to protect critical assets.
Detect insider threats by analyzing behavioral patterns, assessing anomalous activities, and identifying potential cybersecurity risks.
Collect and preserve digital evidence, perform detailed network analysis, and integrate intelligence from multiple cybersecurity sources.
Coordinate strategic risk mitigation responses, develop insider threat briefings, and advise internal and external cybersecurity partners.
Explore the courses below that are aligned with this job role.
SANS Essentials Courses are designed for individuals with an understanding of IT or cyber security concepts.
Intermediate courses are designed for cybersecurity professionals with practical, hands-on experience.
Advanced courses are designed for highly experienced cybersecurity professionals seeking expert-level mastery.
Responsible for collecting, processing, analyzing, and disseminating cybersecurity threat assessments. Develops cybersecurity indicators to maintain awareness of the status of the highly dynamic operating environment.
Explore learning pathResponsible for analyzing digital evidence from computer security incidents to derive useful information in support of system and network vulnerability mitigation.
Explore learning pathThis Competency Area describes a learner’s capability related to architecting, designing, developing, implementing, and maintaining the trustworthiness of systems that use or are enabled by cyber resources in order to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises.
Explore learning pathResponsible for assessing systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy. Measure effectiveness of defense-in-depth architecture against known vulnerabilities.
Explore learning pathResponsible for testing, implementing, deploying, maintaining, and administering infrastructure hardware and software for cybersecurity.
Explore learning pathResponsible for analyzing data collected from various cybersecurity defense tools to mitigate risks.
Explore learning pathResponsible for investigating, analyzing, and responding to network cybersecurity incidents.
Explore learning pathThere are numerous different roles in cybersecurity and where you fit depends on your interest level. SANS New to Cyber offers courses, certifications, and free resources for anyone interested in getting started in cybersecurity.
Explore New to Cyber