SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Cybersecurity Webinars and Workshops
Unlock industry insights and hands-on learning with upcoming SANS webcasts and workshops. View archived webcasts here.
SANS Community Night Riyadh March 2023 - Prevention Vs Detection
A lot of effort is put into building and configuring preventative controls for our IT environments. The idea makes sense, we want to prevent attacks. However, is this always the best option?
WebinarCyber Defense
- 13 Mar 2023
- 18:00 GST
- Tarot (Taz) Wake
Building Better Cloud Detections... By Hacking? | AWS Edition
As with any enterprise environment, we can (and should) focus on hardening our defenses to keep the adversaries out, but these defenses may some day be evaded via a variety of methods.
WebinarCloud Security
- 14 Mar 2023
- 10:00 UTC
- Ryan Nicholson
Streamline and Eliminate Audit Procedures
Performing audits on organizations of any size is no easy task. Successful audits require communication amongst various functions and auditors; all of whom may be operating on different timetables, with different requirements and defined areas of responsibility. Each moment wasted on trying to “gather” audit information is time spent not performing the audit.
WebinarSecurity Awareness
- 14 Mar 2023
- 15:30 UTC
- Matt Bromiley
Designing Access to Shared Datasets in the Cloud
This workshop is structured around teaching students how to construct access to shared datasets in S3 and more broadly, cementing in their minds the threats to consider when using cloud-native storage. Students will dive headlong into a case study where they will serve as the Cloud Security Architect Consultant for a fictional company undergoing the growing pains of a nascent cloud migration.
WebinarCloud Security
- 15 Mar 2023
- 10:00 UTC
- Kat Traxler
2023 SANS Report: Become Timeless: The Present and Future Skills Needed for Cyber Security Job Success at Any Level
The hard skills required to be successful in the cyber security industry are constantly evolving. The evolution of technology and the ever-evolving threat landscape have contributed to a new world of hard skills cyber security professions need to be well versed. Acquiring additional skills will not only help you better protect your organization, but also help grow your successful career in this dynamic industry. Knowing what skills to acquire can be overwhelming when you do not know where to start.
WebinarSecurity Awareness
- 15 Mar 2023
- 15:30 UTC
- Ted Demopoulos & Kevin Garvey
SANS Community Night Abu Dhabi March 2023 - Establishing the Link Between Corruption and Cybercrime
We are confronted by so many cyber threat actors, with the primary focus being on external threats, and when it comes to internal threats, the focus is often on internal negligence. But the reality is we are seeing in more and more cases that external threat actors are actually simply corrupting internal staff members, often in trusted IT and security positions, to overcome even the most sophisticated cyber security systems.
WebinarDigital Forensics and Incident Response
- 15 Mar 2023
- 18:30 GST
- Jason Jordaan
大規模なインシデントレスポンスの対処法
大規模なインシデントレスポンスは、従来のフォレンジックアプローチを拡張するものではなく、全く別の対処が必要となります。Mathiasは、100,000以上のエンドポイント端末を所有する組織において大規模なインシデントに対処する際のさまざまな落とし穴に焦点を当てます。この講演では、多くのポイントを取り上げますが、特にドキュメンテーションに焦点を当て、それがどのようにリソースや被害者、その他のステークホルダーのマネジメントと結びついているかを説明します。
WebinarDigital Forensics and Incident Response
- 15 Mar 2023
- 19:00 UTC
- Mathias Fuchs
SANS Community Night Secure Singapore 2023 - Managing Large-Scale Response
Large-scale incident response is not about scaling classical forensic approaches, it's an entirely different field. In his talk, Mathias will focus on the various pitfalls when handling major breaches in organizations with well above 100.000 endpoints. While there are many points to cover, the main focus of the talk will be on documentation and how it ties into managing resources, the victim and other stakeholders.
WebinarDigital Forensics and Incident Response
- 15 Mar 2023
- 19:00 UTC
- Mathias Fuchs
Top 5 Reasons Why Posture Management is not Enough for Cloud Security
Most companies with cloud infrastructure have implemented multiple security posture tools, along with compliance management and identity access management – but breaches still happen. A recent IBM study found that organizations take an average of 207 days to uncover breaches and another 70 days to remediate. Configuration and vulnerability management are important for compliance reporting but not enough.
WebinarCloud Security
- 16 Mar 2023
- 10:30 UTC
- Chen Burshan & Jennifer Gill
The New OSINT Cheat Code: ChatGPT
The intelligence cycle is a six-step process to gather, analyze, and disseminate intelligence information. During the webinar, we will discuss how ChatGPT, an AI-based language model, can assist in each phase of this process.We’ll provide real-world examples of ChatGPT being used to drastically reduce the time it takes to go from concept to functionality and to help us learn while we’re using it.
WebinarOpen-Source Intelligence
- 16 Mar 2023
- 11:00 UTC
- Matt Edmondson
SANS Community Night Abu Dhabi March 2023 - ICS / OT Security Challenges, Assessments, and Takeaways
Don C. Weber will discuss his experiences related to the cyber security challenges facing utilities, industrial, and automation industries. He will discuss the challenges he has experienced, outline security assessments of OT environments, and provide insight into common systemic issues. The presentation will include a question-and-answer session to allow attendees to discuss the challenges and resolutions experienced by their own teams.
WebinarIndustrial Control Systems Security
- 16 Mar 2023
- 18:30 GST
- Don C. Weber
Breaking the Cloud Kill Chain
Organizations are moving data and applications into public cloud services at a rapid pace. As the public cloud footprint expands, red teams and attackers are reinventing the kill chain in the cloud. Public cloud services provide new, creative ways to discover assets, compromise credentials, move laterally, and exfiltrate data. In this webcast, Eric Johnson (SEC510 and SEC540 author) explores common cloud attack techniques from the MITRE ATT&CK Cloud Matrix. For each technique, we will analyze misconfigurations, exploitation paths, and common architecture patterns for breaking the kill chain.
WebinarCloud Security
- 21 Mar 2023
- 10:00 UTC
- Eric Johnson