SANS Chicago 2027

SANS Chicago 2027: Hands-On Courses on the Magnificent Mile

SANS Chicago 2027 runs April 26 - May 1 at the Embassy Suites Chicago Downtown Magnificent Mile, in-person and online. Courses span foundational security essentials through advanced red team operations, ransomware response, and AI-powered forensics, each taught by a practicing instructor and aligned to a GIAC certification exam.

Courses That Span Beginner to Advanced Practitioner

The courses available are wide in skill level, running from someone obtaining a first security certification all the way up to advanced red team operations and kernel-level tradecraft, so this event works for a newcomer and a seasoned operator attending the same week. That range, combined with newer courses on ransomware response and AI-assisted forensics, makes it a practical pick for a team at mixed experience levels.

The Embassy Suites in Streeterville sits two blocks from Navy Pier and the Magnificent Mile, and its restaurant, 511 North, cooks with herbs grown in a rooftop Sky Garden.

Course highlights:

• Push into stealthy tradecraft in Advanced Red Team Operations, covering EDR evasion, kernel-level research, and covert infrastructure.
• Investigate a live ransomware case from initial access to recovery in Ransomware and Cyber Extortion.
• Run local LLMs against real forensic artifacts in Applied AI for Digital Forensics and Incident Response.