The most trusted source for computer security training, certification and research.



Coming Soon - Nearly complete!

New Courses: Up and Running | Coming Soon | In Development

SEC 520: Database Activity Monitoring Systems

Debuts at: SANS London 2009

This practical course will teach the attendee how to monitor end user activity from the Web Application and Business Logic layers to the Database so that SQL queries can be matched to individual web accounts.

Examples of advanced Hacking attacks will be shown mainly using Oracle as an example and strategies for rule writing to alert against this activity will be shown.

The course will discuss commercial and free tools such as Imperva Securesphere, Guardium and Sentrigo Hedgehog. A free version of Sentrigo Hedgeghog will be used for advanced rule writing covering new exploitation methods.

Profiling rules will be written based on user activity and alerts will be designed to trigger on unauthorized access to sensitive data.

Full Course Description >>


Enter your email below to be notified about updates/completion for this course.



SEC 565: Data Leakage Prevention - In Depth

Debuts at: SANS WhatWorks in Data Leakage Prevention and Encryption Summit 2010

In these times, it is so important to understand where your data resides and how to properly protect that which is most critical. In this course you will learn the techniques necessary to systematically dissect the environment your critical data traverses. At the same time, you will learn practical solution options for making the environment more secure, better monitored, and audited. This course will use hands-on labs to showcase the methodology, tools, and techniques used in data loss protection (DLP) on Windows and Linux-based environments.

Full Course Description >>


Enter your email below to be notified about updates/completion for this course.



SEC 567: Power Packet Crafting with Scapy

Have you ever written a new Snort rule but had no test traffic to see if it alerts? Have you ever tried to craft traffic to perform some pen testing using a restrictive command line packet crafting tool, but gave up because it couldn't do what you wanted it to do? Have you ever wondered if your firewall would block certain traffic? You feel a bit defeated because you know what you want to do…you just don't have the proper tool or wherewithal to do it.

Full Course Description >>


Enter your email below to be notified about updates/completion for this course.



New Courses Home

Contact us: (301) 654-SANS(7267)
Monday - Friday 9am-8pm EST/EDT