SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Cybersecurity Webinars and Workshops
Unlock industry insights and hands-on learning with upcoming SANS webcasts and workshops. View archived webcasts here.
How the Cloud Changes SecOps and Incident Response: Lessons from a Real-World Living-Off-The-Cloud Attack
Adversaries are increasingly targeting multi-cloud infrastructures to disrupt operations and demand ransomware, exfiltrate sensitive data, and steal funds. To accomplish this while evading detection, they often adapt traditional Living-off-the-Land (LOTL) tactics to the specific API-driven characteristics of the cloud.
WebinarDigital Forensics and Incident Response
- 15 Nov 2023
- 15:30 UTC
- Yotam Meitar & Phil Neray
Hands-On Workshop: Building Better Detections | AWS Edition
This is a 2-hour hands-on workshop. As with any enterprise environment, we can (and should) focus on hardening our defenses to keep the adversaries out, but these defenses may some day be evaded via a variety of methods. Cloud is no different.
WebinarCloud Security
- 16 Nov 2023
- 10:00 UTC
- Shaun McCullough
What You Need to Know About the SEC Cybersecurity Mandate, Part of the SANS Compliance Countdown Series
Come learn from SEC staff on what you need to know about reporting and how to get your organization up to speed on the upcoming disclosure requirements. Some of the items covered include:
WebinarCyber Defense
- 16 Nov 2023
- 10:30 UTC
- Luna Bloom
Hack More. Report Less. Fix What You Find Every Time.
Without the right tools and processes in place, test planning and report creation can be a manual nightmare, taking pentesters' focus away from what they do best — hacking.
WebinarCyber Defense
- 16 Nov 2023
- 15:50 UTC
- Dan DeCloss
Community Night - SANS Offensive Operations Australia
A lot of the traditional techniques we use for incident response, and digital forensics, are too slow when dealing with the challenges of scale and time in a modern intrusion.
WebinarOffensive Operations
- 16 Nov 2023
- 18:00 AEDT
- Tarot (Taz) Wake & Brandon McCrillis
Tips & Tricks For Digital Dumpster Diving
Being able to find sensitive organizational information is a core skill for investigators and cyber security professionals alike. Red Teamers use it for reconnaissance, while Blue Team members need to be alert to the ways in which confidential data can leak through carelessness or misconfigurations.This talk will look at a range of techniques from beginner to more advanced level that will help you to find and exploit company data.
WebinarCyber Defense
- 20 Nov 2023
- 17:30 GST
Community Night - Singapore November 2023
QUIC is a new transport protocol that is "quickly" being adopted across the internet. Application protocols like HTTP/3, SMB, and DNS are using QUIC today. How do your network, security, and middleware devices handle QUIC traffic? What are some of the security impacts to the QUIC protocol? In this talk, we're going to look at the QUIC protocol and the effect it is having on networks and security.
WebinarCyber Defense
- 22 Nov 2023
- 18:30 UTC
- Andrew Laman & Jess Garcia
Configuring the Future: Addressing Network and Configuration Risks in Modern Cloud Security
The evolution of cloud technologies has ushered in a new era of opportunities, but with it comes a unique set of challenges, particularly in the realms of configuration and network security. This talk will shed light on the modern practices and strategies essential for safeguarding cloud environments against configuration missteps and network vulnerabilities. We'll dissect real-world scenarios where configuration errors led to breaches and delve into network risks that are often overlooked. By exploring tools, protocols, and best practices, attendees will gain insights into fortifying their cloud infrastructures. Join us on this journey through the intricacies of cloud security, ensuring that your organization remains resilient in the face of ever-evolving threats.
WebinarCloud Security
- 28 Nov 2023
- 13:00 UTC
- Brandon Evans & Avishai Wool
Sneak Peek for SANS VIP Customers
Players will have to use their cybersecurity skills to venture by boat across the Geese Islands in the South Pacific Ocean, all the way to outer space where they will learn the Space Packet Protocol (SPP). To solve each challenge along the way, players will have to use AI tools – helping Santa and the elves as they grapple with their own new AI technology called ChatNPT (North Pole Technologies). This special November 29 Sneak Peek is a whole week before the 2023 game officially launches and opens for play. Come see what else is in store in this invite-only webcast – before anyone else – and get ready for the 2023 game to open for play the second week of December.
WebinarCyber Defense
- 29 Nov 2023
- 11:00 UTC
- Ed Skoudis
SANS Detection Engineering Survey: Detection Engineering Best Practices for Implementing a Threat-Informed Defense
There are two cybersecurity truisms: You can’t prevent attacks you can’t detect; and attacks you can’t prevent turn into incidents you need to detect before you can respond to them.
WebinarSecurity Awareness
- 29 Nov 2023
- 13:00 UTC
- Mark Orlando & Kish Galappatti
SANS Educational Institutions Winter 2024 Program Overview
This webcast will provide a detailed overview of all the products and pricing offered to accredited educational institutions, in the US and Canada through the SANS / REN-ISAC partnership program. Join in to hear from the SANS product experts and get your questions answered about the training solutions offered through the program.
WebinarCyber Defense
- 29 Nov 2023
- 14:00 UTC
DoD CIO Cyber Workforce Session, Part of the SANS Compliance Countdown Series
The Office of the DoD Chief Information Officer recently published two critical initiatives: the 2023-2027 DoD Cyber Workforce Strategy and DoD Manual 8140.03. The strategy establishes the direction for unified management of the cyber workforce and outlines a roadmap for its advancement while DoDM 8140 changes the way that we qualify our workforce. Through the DoD 8140 Cyber Workforce Qualification Program, DoD is expanding the qualification program to roughly 225,000 military, civilian, and contractor positions by establishing foundational and residential qualification criteria for each DoD Cyber Workforce Framework work role. Together, the strategy and program will enable the DoD to develop and deploy an agile, capable, and ready cyber workforce.
WebinarCyber Defense
- 29 Nov 2023
- 15:00 UTC
- Mark Gorak