The most trusted source for computer security training, certification and research.

Global Information Assurance Certification

If you want to be a technology and security leader, this is the course for you!
-Andrew Longsworth, Priscoll's

NOTE: Mentor sessions run for 10 weeks, one evening a week for two hours unless otherwise noted below.
Security 504: Hacker Techniques, Exploits and Incident Handling

Augusta, GA 30904
Thursday, August 20, 2009 - Thursday, October 29, 2009

CLOSED

Course Fee: $2,995.00

$499.00 Additional For Proctored Certification †
$399.00 Additional For OnDemand

* Payment must be RECEIVED by the deadline to receive the posted rate.

Mentor: Mark Baggett
Date:  Thursday, August 20, 2009
Meeting Time:  7:00 PM - 10:00 PM
Where:

Augusta State University
2500 Walton Way
Allgood Hall (N-126)
Augusta, GA 30904
Campus Map: http://www.aug.edu/public_relations/pr_map_campus.htm
Mentor Bio:
 Mark Baggett: Mark Baggett has been in the computer industry for 18 years. During his career Mark has held leadership positions with software development teams, network and systems engineering teams and information security for large multinational companies such as Monsanto, NutraSweet, Morris Communications and others. Today as the CISO for Morris Communications, Mark is responsible for setting policy, compliance, strategy and all aspects of information security operations.

Mark is responsible for the creation of the company incident response plan and leads the incident response team. Ed Skoudis called Mark a "Notable Security Stud" on the Ethical Hacker blog. John Strand called Mark a "Network Ninja" in his "Best of Network Penetration tools" presentation. As a SANS MSISE student Mark presented "The Effectiveness of Antivirus in Detecting Metasploit Paylaods" at SANS CDI 2008. Mark is an accomplished penetration testing and strives brings his real world experience to the classroom. You can read about Marks latest exploits on his blog at http://www.indepthdefense.com. Today Mark holds GSEC Gold, GCIH Gold, GPEN, CISSP and the MCSE certifications.

This course prepares you for the GCIH certification ( http://www.giac.org/certifications/security/gcih.php ) which meets the requirement of the DoD 8570 IAT Level III.

No organization can fight back against cyber attacks if their security and system administration staff does not know how the most current attacks are launched and the technical details that allow the attacks to be blocked.

That's why SANS Security 504, Hacker Techniques, Exploits and Incident Handling is SANS second most popular course. What is not well known, SANS Hacker Techniques course is *much* better than courses offered by other organizations, because SANS teaches you not only how to use the attack tools (as others do), but also how to stop the attacks (as others fail to do). By helping you understand attackers' tactics and strategies in detail, giving you hands-on experience in finding vulnerabilities and discovering intrusions, and equipping you with a comprehensive incident handling plan, the in-depth information in Security 504 helps you turn the tables on computer attackers.

This course addresses the latest cutting-edge insidious attack vectors and the oldie-but-goodie attacks that are still so prevalent, and everything in between. Instead of merely teaching a few hack-attack tricks, this course includes a time-tested, step-by-step process for responding to computer incidents, a detailed description of how attackers undermine systems so you can prepare, detect, and respond to them, and a hands-on workshop for discovering holes before the bad guys do. Additionally, the course explores the legal issues associated with responding to computer attacks, including employee monitoring, working with law enforcement, and handling evidence.

The SANS Hacker Techniques, Exploits and Incident Handling course runs for 10 weeks and is divided into 7 sections:

  • Introduction to SANS and GIAC Certification Orientation
  • Incident Handling Step-by-Step Computer Crime Investigation
  • Computer and Network Hacker Exploits, Part 1
  • Computer and Network Hacker Exploits, Part 2
  • Computer and Network Hacker Exploits, Part 3
  • Computer and Network Hacker Exploits, Part 4
  • Part 6: Hacker Tools Workshop
This challenging course is particularly well suited to individuals who lead or are a part of an incident handling team. Furthermore, general security practitioners, system administrators, and security architects will benefit by understanding how to design, build, and operate their systems to prevent, detect, and respond to attacks. Security 504 will prepare you for the GIAC Certified Incident Handler (GCIH) certification.

A frequent question is whether this is a self study or a live course led by a Local Mentor? The answer is "both".

Students study SANS Hacker Techniques, Exploits and Incident Handling course books at their own pace. Each week, students meet with other professionals in the area and SANS Local Mentor, who will lead class discussions, provide hands-on demonstrations, point out the most salient features, and answer questions. The Mentor's goal is to help you grasp the more difficult material, master the exercises, and prepare you for the GCIH certification.

Course Materials:

  • Hardcopy SANS Hacker Techniques, Exploits and Incident Handling course books
  • Local Mentor Program study materials
  • Ten Weekly 2-hour Mentor led sessions
All Students will receive 4 months access to their online study materials at the start of their 2nd Class session.

Group Discounts:
SANS Local Mentor Program is pleased to offer two (2) or more Students who work at the same organization, a Group Discount tuition fee. To obtain the Group Discount fee and Registration Code offered for this course, contact tuition@sans.org PRIOR to registering and provide the names and e-mail addresses of all the students registering within your organization.

LMP Exclusive Offer:
SANS makes every effort to help you obtain certification. SANS Local Mentor Program extends an exclusive offer to Students who previously attended SANS Security 504, Hacker Techniques, Exploits and Incident Handling after January 1, 2001, but did not complete their GCIH certification.

For details on this special offer, please contact at registration@sans.org with the date and location you attended SANS Hacker Techniques course, along with your momgate login ID and e-mail address.