SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
504lab
Last updated: 17 Jun, 2025
Created by
SANS Institute
The 504lab is one of the many great labs in SEC504. This tool will mimic malware behavior and ask you to identify it. Use this tool to sharpen your end point threat hunting skills.
Author
SANS Institute
Launched in 1989 as a cooperative for information security thought leadership, it is SANS’ ongoing mission to empower cyber security professionals with the practical skills and knowledge they need to make our world a safer place.
Read more about SANS InstituteRelated Resources
Related Courses
- Slide 1 of 19
SEC588: Cloud Penetration Testing™
Expert SEC588Cloud Security
- 36 CPEs / 36 Hours (Self-Paced)
- Slide 2 of 19
SEC467: Social Engineering for Security Professionals
Beginner SEC467Offensive Operations
- 2 Days (Instructor-Led)
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 8 Hours of hands-on instruction
- Slide 3 of 19
SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk
Intermediate SEC568Offensive Operations
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 4 of 19
SEC565: Red Team Operations and Adversary Emulation
Intermediate SEC565Offensive Operations
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 5 of 19
SEC560: Enterprise Penetration Testing
Intermediate SEC560Offensive Operations
- GIAC Penetration Tester (GPEN)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 6 of 19
SEC556: IoT Penetration Testing
Intermediate SEC556Offensive Operations
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours (Self-Paced)
- Slide 7 of 19
SEC699: Advanced Purple Teaming - Adversary Emulation & Detection Engineering
Advanced SEC699Offensive Operations
- 5 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 29 Hours of hands-on instruction
- Slide 8 of 19
SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking
Advanced SEC660Offensive Operations
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- 6 Days (Instructor-Led)
- 46 CPEs / 46 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 9 of 19
SEC504: Hacker Tools, Techniques, and Incident Handling
Essentials SEC504Offensive Operations- GIAC Certified Incident Handler Certification (GCIH)
- 6 Days (Instructor-Led)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 10 of 19
SEC580: Metasploit for Enterprise Penetration Testing
Intermediate SEC580Offensive Operations
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 10 Hours of hands-on instruction
- Slide 11 of 19
SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses
Major UpdatesIntermediate SEC599Offensive Operations
- GIAC Defending Advanced Threats (GDAT)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 25 Hours of hands-on instruction
- Slide 12 of 19
SEC617: Wireless Penetration Testing and Ethical Hacking™
Intermediate SEC617Offensive Operations- GIAC Assessing and Auditing Wireless Networks
- 36 CPEs / 36 Hours (Self-Paced)
- Slide 13 of 19
SEC760: Advanced Exploit Development for Penetration Testers™
Expert SEC760Offensive Operations- GIAC Advanced Smartphone Forensics (GASF)
- 2 Days (Instructor-Led)
- 46 CPEs / 46 Hours (Self-Paced)
- Slide 14 of 19
SEC542: Web App Penetration Testing and Ethical Hacking
Intermediate SEC542Offensive Operations
- GIAC Web Application Penetration Tester (GWAPT)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 15 of 19
SEC504J: Hacker Tools, Techniques, and Incident Handling (Japanese)
Essentials SEC504JOffensive Operations- GIAC Certified Incident Handler Certification (GCIH)
- 6 Days (Instructor-Led)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 30 Hours of hands-on instruction
- Slide 16 of 19
SEC575: iOS and Android Application Security Analysis and Penetration Testing
Intermediate SEC575Offensive Operations
- GIAC Mobile Device Security Analyst (GMOB)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 17 of 19
SEC598: Security Automation for Offense, Defense, and Cloud
Intermediate SEC598Offensive Operations
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hours of hands-on instruction
- Slide 18 of 19
SEC535: Offensive AI - Attack Tools and Techniques
betaIntermediate SEC535Offensive Operations
- GIAC Advanced Smartphone Forensics (GASF)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 15 Hours of hands-on instruction
- Slide 19 of 19
SEC670: Red Teaming Tools - Developing Windows Implants, Shellcode, Command and Control™
Intermediate SEC670Offensive Operations- 46 CPEs / 46 Hours (Self-Paced)