SANS Delhi 2011

Encouraged by the massive success of our recent Bangalore event and feedback from our colleagues in India we are very pleased to announce the following course line up for SANS Delhi 2011, 12-17 September 2011, taught by SANS' top instructors from the United States:

AUDIT 507: Audit Principles, Risk Assessment, and Effective Reporting (GIAC certification: GSNA) taught by SANS Faculty Fellow David Hoelzer

One of the most significant obstacles facing many auditors today is how exactly to go about auditing the security of an enterprise. What systems really matter? How should the firewall and routers be configured? What settings should be checked on the various systems under scrutiny? Is there a set of processes that can be put into place to allow an auditor to focus on the business processes rather than the security settings? All of these questions and more will be answered by the material covered in this course.
This course is organized specifically to provide a risk driven method for tackling the enormous task of designing an enterprise security validation program. After covering a variety of high-level audit issues and general audit best practice, the students will have the opportunity to dive deep into the technical how-to for determining the key controls that can be used to provide a level of assurance to an organization. Tips on how to repeatedly verify these controls and techniques for automatic compliance validation will be given from real-world examples.

FORENSICS 408: Computer Forensic Investigations - Windows In-Depth (GIAC certification: GCFE) taught by SANS Instructor, Ovie Carroll

This course focuses on the critical knowledge that a computer forensic investigator must know to investigate computer crime incidents successfully. You will learn how computer forensic analysts focus on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation.
This course covers the fundamental steps of the in-depth computer forensic methodology so that each student will have the complete qualifications to work as a computer forensic investigator in the field helping solve and fight crime. In addition to in-depth technical digital forensic, knowledge on Windows Digital Forensics (Windows XP through Windows 7 and Server 2008) you will be exposed to well known computer forensic tools so such as FTK, Registry Analyzer, FTK Imager, Prefetch Analyzer, and much more.

SECURITY 542: Web App Penetration Testing and Ethical Hacking (GIAC certification: GWAPT) taught by SANS Certified Instructor, Pieter Danhieux

Web applications are a major point of vulnerability in organizations today. Web app holes have resulted in the theft of millions of credit cards, major financial and reputational damage for hundreds of enterprises, and even the compromise of thousands of browsing machines that visited Web sites altered by attackers. In this intermediate to advanced level class, you'll learn the art of exploiting Web applications so you can find flaws in your enterprise's Web apps before the bad guys do. Through detailed, hands-on exercises and training from a seasoned professional, you will be taught the four-step process for Web application penetration testing. You will inject SQL into back-end databases, learning how attackers exfiltrate sensitive data. You will utilize cross-site scripting attacks to dominate a target infrastructure in our unique hands-on laboratory environment. And you will explore various other Web app vulnerabilities in depth with tried-and-true techniques for finding them using a structured testing regimen. You will learn the tools and methods of the attacker, so that you can be a powerful defender.

All of the above courses are associated with GIAC (Global Information Assurance Certification).

Please contact us at [email protected] for further information. We look forward to connecting with you at SANS Delhi 2011!