This hands-on workshop supports content from FOR509: Enterprise Cloud Forensics and Incident Response. Join us for an immersive hands-on workshop investigating a sophisticated attack in Google Cloud Platform. Through guided investigation using SOF-ELK, participants will analyze a compromised GenAI application deployment that leads to data exfiltration. Students will learn how organization policies affect attack paths and how to leverage cloud...

Unlock the full potential of your career with cyber security training at SANS Seattle 2024 (December 2-7, PT). Guided by world-renowned instructors at the forefront of the field, this event provides exclusive access to live industry experts, ensuring you stay ahead of the curve. Immerse yourself in a learning environment that features industry-leading hands-on labs, simulations, and exercises, all geared towards practical application in your p...

As cloud security controls mature, it’s common to find that a wide variety of security controls and configuration capabilities are melding into a single platform or service fabric, in addition to the cloud provider infrastructure. Ranging from CNAPP to CSPM to CWPP and beyond, controls that cover the pipeline, workload security, cloud environment configuration, IaC templates, and runtime (and much more) are starting to evolve into a much...

Modern security leaders must deal with an endless barrage of changes to the business, technology, and threat landscape. This requires a combination of technical knowledge, understanding of risk, and the ability to lead teams in times of intense pressure. Doing so requires building a comprehensive program of controls to manage information risk, enhancing cybersecurity governance while ensuring compliance, and dealing with inevitable incidents a...

Hear ye! Hear ye! Be ye free from the CRT! What’s life like anyway without the CRT? What can a program even do without it? As the entire series comes to a close, this part will explore the CRT and how to become independent from it. This independence is critical to understand when it comes to creating binaries that are compiled as PIC; Position Independent Code. This entire 10-part series has over 20 hours of free content that teaches you...

Unlock the full potential of your career with cyber security training at SANS Golden Gate 2024 (November 18-23, PT). Guided by world-renowned instructors at the forefront of the field, this event provides exclusive access to live industry experts, ensuring you stay ahead of the curve. Immerse yourself in a learning environment that features industry-leading hands-on labs, simulations, and exercises, all geared towards practical application in...

Enhance your cybersecurity skills at SANS DFIRCON Miami 2024: Special Edition (November 17-23, ET). Join us for a premier cybersecurity event led by top industry course authors known for their deep expertise and practical approach. Pre-Event Community Learning Day - Sunday, Nov 17 This Special Edition of DFIRCON offers FREE & unique pre-event sessions, just before the training week, that include hands-on tutorials using open-source tools c...

In the age of artificial intelligence (AI) and ever-evolving cyber threats, the landscape of security operations has witnessed a transformative shift. Our 2024 Detection & Response Survey delves into how organizations address critical aspects of detection, response, and the integration of these vital functions within organizations. On this webcast, SANS Certified Instructor Josh Lemon will provide insights into the prevalence of organizati...

Cloud breaches are typically associated with smash and grab jobs such as cryptojacking or dumping S3 buckets. However, there is a shift in threat landscape in how adversaries are leveraging cloud platforms to achieve more targeted goals. As these techniques become more sophisticated, there becomes a need for adversaries to slow down and establish persistence in these environments. This talk will cover persistence mechanisms specific to the AWS...

CISOs and security leaders are under increased scrutiny and pressure, not only from internal leadership, but also from external requirements like the updated SEC rules and NIS2 changes in Europe. We'll cover this new regulatory landscape, how to best communicate with the board, and how to build your business case in response to technology shifts like GenAI. Come learn about the top three CISO strategic issues and what you as a modern security...