Dear Colleague,

December brings SANS' best new courses to Washington to serve the nation's most sophisticated cyber security community. See our new hacker classes, wireless, secure coding, pen testing, Virtualization, 20 critical controls, and more. SANS is the one education organization known for developing those security skills now most in need. Don't miss this unique chance to learn from the best teachers in security. This year we are offering the inaugural WhatWorks in Incident Detection Summit in the same location December 9-10, 2009! If you liked the Forensics Summit, this is the ideal partner event to enhance your knowledge.

Pick a course and come to SANS Cyber Defense Initiative, December 11-18, 2009. You'll get the kind of hands-on, immersion training that you can put to work immediately -- courses that you will love.

As last year's CDI attendees state:

Great hands-on experience and the instructor's real world experiences and recommendations are invaluable! - Chris Todd, Unisys Canada Inc, (SEC504)

SANS rocks! Andrew Small, DOD

After the first day I immediately realized what changes I should make as an IDS analyst to protect my company's network! - Mark C Bradford, Savannah River Nuclear Solutions, SEC503

So, go to our Event-at-a-Glance page and pick from these extraordinary immersion programs:

• SEC401: SANS Security Essentials
• SEC504: Hacker Techniques, Exploits & Incident Handling
• SED560: Network Penetration Testing and Ethical Hacking
• SEC508: Computer Forensics, Investigation, and Response
• MGT512: SANS Security Leadership Essentials For Managers
• SEC503: Intrusion Detection in-Depth
• SEC542: Web App Penetration Testing and Ethical Hacking
• SEC505: Securing Windows
• SEC408: Computer Forensic Essentials - New
• LEG523: Legal Issues in Information Technology and Information Security
• SEC606: Drive and Data Recovery Forensics - New
• SEC610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
• DEV541: Secure Coding in Java/JEE: Developing Defensible Applications
• SEC566: 20 Critical Security Controls In-Depth - New

May we bring to your attention our featured 2-day short courses:

• AUD429: IT Security Audit Essentials Bootcamp
• SEC577: Virtualization Security Fundamentals

Along with these seven 1-day courses:

• MGT305: Technical Communication and Presentation Skills for Security Professionals
• MGT404: Fundamentals of Information Security Policy
• SEC434: Log Management In-Depth: Compliance, Security, Forensics, and Troubleshooting - New
• SEC526: Advanced Filesystem Recovery and Memory Forensics
• SEC531: Windows Command-Line Kung Fu In-Depth for Info Sec Pros
• SEC550: Information Reconnaissance: Competitive Intelligence and Online Privacy
• DEV534: Secure Code Review for Java Web Apps - New

Complete your SANS training experience with a GIAC certification attempt! Many of our courses offered at SANS CDI 2009 are associated with a GIAC Certification. Put the skills youÕll learn to practical use and join the thousands of GIAC certified professionals who make the info sec industry safe!

Visit http://www.giac.org/certifications/roadmap.php for more information and register for your certification attempt today!

GIAC certification attempts are available, and many of these certs align with DoD 8570 requirements. See http://www.giac.org/8570/ for more details.

Reserve your seat by October 28, 2009, and save $400 on tuition fees with discounts offered to early registrants. Of course, SANS top instructors will be on hand to bring you the best in computer security training. Certifications are available for many of these SANS courses and can send you on your way to career advancement.

Throughout my 8 year career in IT so far, I've been exposed to terms like open testing, single sign on, defense in depth, etc. but I could not fit them into the big security picture or understand them. After this day I have a better understanding and fit for these terms and concepts. - Ruchika Sindhi, SRA International, Inc.

Excellent, especially the lab work and analyzing the packets this is information I will be able to take back to work and use. - Michael Ladd, L3 Communications, SEC503

Instructor answers questions very well and in great detail. The course material is very well written and I can see I will use the books in the future! - Christy Shum, Western Federal Credit Union, SEC401

Stay with us at the Wardman!?

SANS Cyber Defense Initiative 2009 will be back at the Marriott Wardman Park Hotel. A special rate of $197 S/D has been arranged for SANS attendees, which includes complimentary high-speed Internet in your guest room! Government per diem rooms are available with proper ID. Simply call reservations (1-800-266-9432) and ask for the SANS government rate. Adjacent to Rock Creek Park on 16 lush acres of gardens, you'll enjoy a magnificent setting that puts all the best of DC right at your fingertips the Smithsonian Museums, the National Zoo, Georgetown, the Kennedy Center, a fabulous selection of stores and restaurants and more! Make your reservations now as this special rate is based on space availability.

To follow or to Tweet about this event, please use hashtag #sanscdi. To follow SANS, use: http://twitter.com/SANSInstitute

So register today to join us in Washington DC for SANS Cyber Defense Initiative 2009! I look forward to meeting you there!

Kind regards,
Alan Paller
Director of Research
The SANS Institute, a postgraduate computer security college