SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Cybersecurity Webinars and Workshops
Unlock industry insights and hands-on learning with upcoming SANS webcasts and workshops. View archived webcasts here.
SANS Government Cybersecurity Solutions Focus Report
Threat actors continue to make government agencies – at the federal, state and local levels – one of their most important targets. A series of Presidential Executive Orders and DHS CISA Binding Operational Directives have been issued in response, often with specific cybersecurity control and technology requirements. Government agencies need to address both these pressures, and do it with limited resources, prioritizing their actions based on identified risks and available resources
WebinarSecurity Awareness
- 16 Nov 2022
- 15:30 UTC
SANS Workshop – NTLM Relaying 101: How Internal Pentesters Compromise Domains
In this workshop, SANS certified instructor Jean-François Maes will walk you through some of the most used NTLM relay attack paths pentesters use to compromise the domain.
WebinarCyber Defense
- 29 Nov 2022
- 12:00 UTC
SANS Holiday Hack Challenge Special Invitation-Only Sneak Peek for SANS Customers
SANS is finalizing our exciting, free Holiday Hack Challenge for release the second week of December. It’s our gift to the cybersecurity community every year, featuring fun real-world cyber security challenges, a quirky story line, and a bunch of holiday cheer.
WebinarCloud Security
- 29 Nov 2022
- 12:00 UTC
- Ed Skoudis
Integrating Open NDR To Automate Alert Response Via Better Network Evidence
Are you interested in context for your cloud or container environment when you investigate an event from last week, last month, or last year? Would it save you time to have IDS alerts that include the full context of the connection? Join this session to hear James Schweitzer demonstrate some easy to understand, interlinked network evidence, available wherever you need it and which also enables orchestration.
WebinarCyber Defense
- 13 Dec 2022
- 12:30 UTC
- James Schweitzer
StreamYard Test
StreamYard Test
WebinarCyber Defense
- 15 Dec 2022
- 09:30 UTC
XDR Does Not Exist Without NDR
In today’s world of enterprise security, many technology options are available—perhaps too many. Despite all the options available, security teams still ask the same questions: What is the “right” telemetry? How do we best integrate, and where can we find the best return on our investment?
WebinarDigital Forensics and Incident Response
- 11 Jan 2023
- 10:30 UTC
Blind Data Exfiltration Using DNS and Burp Collaborator
DNS provides one of the best methods for command and control, covert tunneling, and blind data exfiltration. Burp Collaborator provides a great way to both confirm blind injection, and also exfiltrate data. Penetration testers may prepend names to each DNS request, allowing data exfiltration subject to DNS's length limitations (63 characters per label, 255 characters total name) and character limitations. This webcast will describe methods for blind data exfiltration using Burp Collaborator (using both public and private servers), as well as using DNS without Burp. Content directly from SEC542: Web App Penetration Testing and Ethical Hacking.
WebinarCyber Defense
- 12 Jan 2023
- 15:00 UTC
- Eric Conrad
SANS Workshop – Metadata Madness
Metadata is a vital part of digital forensics work but is often glanced over for OSINT. In this workshop, we'll discuss why metadata is far more useful than most analysts give it credit for. We'll cover why many people miss metadata and how it could potentially reveal hidden information. We'll even set up some hands-on exercises so you can practice your skills.
WebinarCyber Defense
- 24 Jan 2023
- 12:00 UTC
- Matt Edmondson
Less Busy work. More Security.
Save your SOC team hundreds of hours on daily tasks.What does an ideal day in the SOC look like? It certainly wouldn’t include what you’re facing now with an endless stream of alerts, user requests and ad hoc fire drills. But you’re not alone. According to USNews, security analyst jobs rank in the top 25 most stressful jobs.
WebinarCloud Security
- 25 Jan 2023
- 13:00 UTC
SANS Holiday Hack Challenge 2022 Closing Ceremonies & Winner Announcements
Connect with the crew behind the annual SANS Holiday Hack Challenge for this special webcast to wrap up another year and name the big winners. Plus, get a sneak peek and a few tips for next year’s challenge, already well under development.Chief creator Ed Skoudis will be joined by members of his team to offer an exclusive behind-the-scenes look at the 2022 event, share how the various challenges came together, cover how players performed, and more. In addition to announcing the winners, they’ll share statistics from the game, including those of the quirky variety such as how many cumulative miles were walked by the nearly 20,000 players who joined in the fun this year.Join us for this one-of-a-kind presentation to tie a bow on the 2022 Challenge and get a head start thinking about what awaits you with the Holiday Hack Challenge 2023.
WebinarCyber Defense
- 25 Jan 2023
- 13:00 UTC
- Ed Skoudis, Christopher Elgee & Tom Liston
Fantastic caches and what you can find in them
Windows puts a lot into logs, but it puts even more into forensic artefacts you may not be aware of. This talk will explore some of the artefacts that, without the knowledge of the user, records more than just metadata. I think it's pretty cool, maybe after this talk you will do....or disable it all...or both?
WebinarCyber Defense
- 26 Jan 2023
- 18:00 JST
- Phill Moore
魅力的な様々なキャッシュとそこから発見できるもの
Windowsのログには多くの情報が記録されていますが、それに加えてフォレンジックに活用できる様々なアーティファクトから情報を読み取ることができます。この講演では、ユーザーの知らない間に、単なるメタデータとは言い切れないような情報を記録しているアーティファクトをいくつかご紹介します。この講演を聞いたあと、あなたはキャッシュを無効にしますか？キャッシュの面白さを感じてもらえたら嬉しいです。
WebinarCyber Defense
- 26 Jan 2023
- 18:00 JST
- Phill Moore