SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
SANS Amsterdam October 2025
- Mon, Oct 20 - Sat, Nov 1, 2025
- 15 Courses
- 2 Tournaments
- English
Amsterdam Marriott Hotel & Virtual (CEST)
Stadhouderskade 12, Amsterdam, 1054 ES, Netherlands
Event Highlights
NetWars Tournaments
As part of your SANS training experience, you’ll receive complimentary access to a NetWars Tournament which is either available at the training event you are attending or will be made available through online access if you are attending a Live Online event. The NetWars Tournament is an interactive cyber range event designed to reinforce your learning through hands-on, gamified challenges.
SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
- GIAC Certified Incident Handler
- 6 Days
- 38 CPEs
- Jon Gorenflo
- Starts 27 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst
- 6 Days
- 36 CPEs
- Jason Jordaan
- Starts 27 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
SEC560: Enterprise Penetration Testing
SEC560Offensive Operations
- GIAC Penetration Tester
- 6 Days
- 36 CPEs
- Jason Nickola
- Starts 27 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
SEC555: Detection Engineering and SIEM Analytics
SEC555Cyber Defense
- GIAC Certified Detection Analyst
- 5 Days
- 30 CPEs
- Nick Mitropoulos
- Starts 20 Oct 2025 at 8:30 AM CEST
- €7,715 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses
SEC599Offensive Operations
- GIAC Defending Advanced Threats
- 6 Days
- 36 CPEs
- Erik Van Buggenhout
- Starts 20 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
SEC699: Advanced Purple Teaming - Adversary Emulation & Detection Engineering
SEC699Offensive Operations
- 5 Days
- 36 CPEs
- Jean-Francois Maes
- Starts 20 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- *Prices exclude applicable local taxes
SEC588: Cloud Penetration Testing
SEC588Offensive Operations
- GIAC Cloud Penetration Tester
- 6 Days
- 36 CPEs
- Moses Frost
- Starts 20 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
SEC510: Cloud Security Controls and Mitigations
SEC510Cloud Security
- GIAC Public Cloud Security
- 5 Days
- 38 CPEs
- Brandon Evans
- Starts 27 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
FOR509: Enterprise Cloud Forensics and Incident Response
FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder
- 6 Days
- 36 CPEs
- David Szili
- Starts 20 Oct 2025 at 8:30 AM CEST
- €8,230 EUR (Course)
- €905 EUR (Certification)
- *Prices exclude applicable local taxes
Schedule
Auto Map Your Reports To MITRE Using Agentic AI
AI is everywhere. Most organizations and users are still just using it as a glorified google search, but it can do so much more! in this talk, we will walk through a practical example on how to leverage agentic AI to enrich your pentest reports with auto tagging mitre ID's!
In-Person & Virtual
The Always-On Purple Team: AI Agents on the Loose
Top-rated RSA session in 2023, 2024 and 2025, the "Always-On Purple Team" session is back! Attendees will discover how AI agents autonomously execute purple teaming and showcase an architecture where AI agents collaborate on threat intel, adversary emulation, and detection engineering. Will include a live demo (based on publicly available tools) and sharing of code!
In-Person & Virtual
Security Is Hard, Will AI Save The Day?
This session will be a fairly lighthearted look at the problems we have in cybersecurity today, and why we struggle to improve things, despite spending billions. We will have a short case study and then finish with some suggestions on how we can make things better.
In-Person & Virtual
Rethinking Digital Forensics in Incident Response
The term DFIR has become really popular over the last several years and is used as an all-encompassing term for digital forensics and incident response. But the reality is that there is actually an inherent contradiction between digital forensics and incident response, because the actual end goals of digital forensics and incident response are actually not the same. The reality is that for most organizations, incident response focuses on making the pain go away, and maybe improving security going forward. Thinking about a legal outcome is far from the reality for most organizations.
In-Person & Virtual
Amsterdam, The Netherlands
Amsterdam is a charming city renowned for its picturesque canals, historic architecture, and vibrant culture. Visitors can explore world-class museums like the Van Gogh Museum and Rijksmuseum, cycle through the city's scenic streets, or relax in iconic neighborhoods like Jordaan. With cozy cafes, tulip markets, and a rich history, Amsterdam offers a perfect mix of relaxation and adventure.
3 Reasons To Stay At The Event Venue
