SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Cybersecurity Webinars and Workshops
Unlock industry insights and hands-on learning with upcoming SANS webcasts and workshops. View archived webcasts here.
2023 Government Security Solutions Forum
In partnership with Carahsoft, the2023 Government Security Solutions Forumwill take our cybersecurity preparedness back to basics.During this event, we'll look at the top trends in protecting networks and securing them against adversarial threats. Continuing our tradition from last year, our forum will include a wealth of knowledgeable experts and panel discussions, offering advice and guidance on how to best counteract the threats of today, and protect your security program for tomorrow. Join us for live chats and interactive discussions with both speakers and audience, giving you a chance to bring your questions and concerns directly to our experts. We are SO excited to bring you this year's Government Security Solutions Forum on Thursday, July 20th! To view the full agenda, lineup of guest speakers, and details about this event, please visit our event landing page.Save your seat by hitting the 'Register' button below. We'll see you there!
WebinarCyber Defense
- 20 Jul 2023
- 10:00 UTC
- Matt Bromiley
No Experience Required – Gaining Clarity for a Career in Cybersecurity
No experience is required for you to create and forge your path in cybersecurity, but you do need clarity. It’s the difference between a successful career and years of wondering, analysis-paralysis, and being stuck.
WebinarCybersecurity and IT Essentials
- 20 Jul 2023
- 13:00 UTC
- Candace Williams & Jennifer E Santiago (Moderator)
An Intro to C for Windows - Part 2
Continuing where our previous workshop, An Intro to C for Windows Devs, left off, this Part 2 picks up with a closer look at the bits behind the bytes, the characters behind the strings, and the addresses behind the pointers. If you have not had a chance to walk through Part 1, you can take the recorded workshop here, https://www.sans.org/webcasts/intro-c-windows-devs/. Please have the projects you were working on during Part 1 readily available as we will continue using them for the remainder of the series.
WebinarCyber Defense
- 24 Jul 2023
- 15:30 UTC
- Jonathan Reiter
Hands-On Workshop: Cloud VM Deployment and Hardening
Securing a cloud environment can be challenging and time consuming, especially if you don't know where to start. This Workshop will scrutinize a common cloud service: Virtual Machines, and focus on the secure implementation of that service. We'll discuss Operating Systems (and why it matters from a cloud perspective), as well as security groups, remote access, system and network hardening as well as how mature organizations handle deployments. While discussing these topics will be enlightening and entertaining, deploying our own infrastructure will be a blast! Join this 2-hour workshop to learn how experts solve for the security concerns surrounding virtual machines in a cloud environment.
WebinarCloud Security
- 25 Jul 2023
- 10:00 UTC
- Serge Borso
Insights into the Latest Ransomware Trends
Join us as we present the findings from the Zscaler ThreatLabz 2023 Ransomware Report. Discover the latest trends in ransomware attacks, backed up by data from the world’s largest security cloud.
WebinarCloud Security
- 25 Jul 2023
- 15:30 UTC
- Nirmal Singh & Brett Stone-Gross
State of Threat Detection – The Defenders’ Dilemma
Today’s security operations (SecOps) teams are tasked with protecting progressively sophisticated, fast-paced cyberattacks. Detecting, investigating and stopping advanced hybrid cyber-attacks at scale and speed is becoming increasingly unsustainable with the complexity of people, process and technology SecOps teams have at their disposal. A perfect storm of an ever-expanding attack surface, highly evasive and emerging attacker methods, and increasing SOC analyst workloads is resulting in a vicious spiral of more for SOC teams.In this “Ask the Expert” Webinar, we will explore an independent global study of 2,000 SecOps analysts, and dive headfirst into the spiral of more that SOC analysts face. Join Matt Bromiley of SANS and the author of the State of Threat Detection research Mark Wojtasiak from Vectra AI. We promise it won’t be a regurgitation of stats from the report (you can read it for yourself). Instead, let’s talk about the “why” the spiral of more exists and how we break it before more SOC analysts hit their own breaking point and quit.
WebinarCyber Defense
- 26 Jul 2023
- 13:00 UTC
- Matt Bromiley, Kevin Kennedy & Mark Wojtasiak
Hunting for Suspicious HTTPS and TLS Connections
This talk navigates the landscape of HTTPS and TLS connections, distinguishing between encrypted and unencrypted HTTPS, and outlining methods to identify suspicious activities.
WebinarCyber Defense
- 26 Jul 2023
- 15:00 CEST
- Maxim Deweerdt
Building Red Team Capability Solutions Forum 2023
Technology has done wonders for productivity over the past 20 years, but cybercriminals have improved their own efficiency using the same tools. In just the past three years, attackers have cut the time needed to deploy an attack from months to days using automation and as-a-service technologies. Meanwhile, cybersecurity teams have never had more data to find patterns and stop attacks — yet the time to detect and respond is still measured in weeks, sometimes even months. How can we empower security leaders and their teams to respond in minutes or even seconds? Hear how leaders are using emerging innovations to close the time gap and inspire confidence as they move from reacting to anticipating.
WebinarCyber Defense
- 27 Jul 2023
- 11:00 UTC
- Peter Szczepankiewicz
Focusing on The Right Cybersecurity Priorities
There are plenty – perhaps too many – frameworks that security leaders and teams can use to benchmark their organization along a journey of cybersecurity maturity. However, even the most popular frameworks don’t use the same metrics and can cause confusion amongst security teams
WebinarCyber Defense
- 2 Aug 2023
- 13:00 UTC
- Greg Notch
2023 Digital Forensics and Incident Response Summit Solutions Track
Investigation is often considered both an art and a science, and practitioners merge these disciplines in the search for the facts in their investigations. While the best tool in both art and science is the amazing capacity of the human brain, and this is especially apparent in the field of digital forensics and incident response, where we match ourselves against the creative ingenuity of committed and capable threat actors; we do need other tools to make our work possible. The digital forensics and incident response tools that we have available to ourselves enhance our abilities to examine and analyze the digital evidence that we need to be able to successful solve the cases and incidents that we are engaged with. These tools enable us, they improve efficiency and effectiveness, and they provide valuable capabilities in the fight against the threat actors we face. As the threats we face evolve, so to must the tools that we use. The SANS DFIR Summit Solutions Track highlight recent developments in the tools and solutions that are available to us. Join us as we explore some of the cutting-edge tools and solutions that we can utilize in our DFIR operations.
WebinarDigital Forensics and Incident Response
- 4 Aug 2023
- 10:00 UTC
- Jason Jordaan
Linux For Information Security Professionals - Linux is back at SANS
Do you remember that one time that awesome information security tool came out on Windows? I think that happened once. Didn't it? But let's face it, if you want to use the best information security tools around you are probably going to be using Linux.
WebinarCyber Defense
- 10 Aug 2023
- 13:00 UTC
- Mark Baggett
Hands-On Workshop: Protecting Cloud Assets and Improving Security
A practical application experience to demonstrate improvement of security posture and increase in visibility of assets and applications. When a system designed for on-premises operation is migrated to a public cloud, it is exposed to additional vulnerabilities and risks of exploitation. This workshop will delve into the realm of cloud native security solutions and techniques, to demonstrate how it is possible to protect such systems that are otherwise considered indefensible particularly in the case of ‘Lift and Shift’.
WebinarCloud Security
- 16 Aug 2023
- 10:00 UTC
- Simon Vernon