Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

SANS Chicago 2027

  • Mon, Apr 26 - Sat, May 1, 2027
  • 15 Courses
  • English
Embassy Suites by Hilton Chicago Downtown Magnificent Mile & Virtual (CT)
511 North Columbus Drive, Chicago, IL 60611
Chicago: River
  • Courses are 1-6 Days Long

    Monday, April 26 – Saturday, May 1

  • 15 Courses

    11 GIAC Certifications

  • All Cybersecurity Focus Areas

    AI Security, Offensive Operations, Cyber Defense, Cloud Security, DFIR, Cybersecurity Leadership and more.

  • Training Formats
Jump to:

SANS Chicago 2027: Hands-On Courses on the Magnificent Mile

SANS Chicago 2027 runs April 26 - May 1 at the Embassy Suites Chicago Downtown Magnificent Mile, in-person and online. Courses span foundational security essentials through advanced red team operations, ransomware response, and AI-powered forensics, each taught by a practicing instructor and most aligned to a GIAC certification exam.

SANS Live Training

Courses That Span Beginner to Advanced Practitioner

The courses available are wide in skill level, running from someone obtaining a first security certification all the way up to advanced red team operations and kernel-level tradecraft, so this event works for a newcomer and a seasoned operator attending the same week. That range, combined with newer courses on ransomware response and AI-assisted forensics, makes it a practical pick for a team at mixed experience levels.

The Embassy Suites in Streeterville sits two blocks from Navy Pier and the Magnificent Mile, and its restaurant, 511 North, cooks with herbs grown in a rooftop Sky Garden.

Course Highlights

  • Push into stealthy tradecraft in Advanced Red Team Operations, covering EDR evasion, kernel-level research, and covert infrastructure.
  • Investigate a live ransomware case from initial access to recovery in Ransomware and Cyber Extortion.
  • Run local LLMs against real forensic artifacts in Applied AI for Digital Forensics and Incident Response.

Students Say

  • Slide 1 of 4
    SANS creates a one-of-a-kind learning experience providing world-class training and fascinating opportunities to network and gain new perspectives from your peers!
    Justin E.U.S. Federal Agency
  • Slide 2 of 4
    The instruction at SANS is top-notch. I have been to several SANS training courses and they never disappoint. The instructors bring real life experiences and show the students how the material can be applied.
    Thomas SeckJohns Hopkins APL
  • Slide 3 of 4
    The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
    Ryan MoellerEureka Strategic Consulting
  • Slide 4 of 4
    SANS training keeps individuals up-to-date with relevant cyber security information. I can now apply the skills learned towards further maturing my program.
    Nicholas MarriottPfizer
Slide 1 of 0
Early Bird Offer

Save $750 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by January 5, 2027.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Sales

GIAC Certification Exam Attempt

2 free practice tests when you add a certification exam attempt to your course. Available for select courses below.

Extra 120 Days of Course Access

Add OnDemand Extended Access for 120 days to help you prepare for your GIAC exam. Available for select courses below.

Schedule

Keynotes & Talks

Learn from industry leaders sharing key security insights.

Social and Community Events

Course Training

Daily required course training hours throughout the week.

Embassy Suites by Hilton Chicago Downtown Magnificent Mile

Hotel Special Rates and Reservations

A special discounted rate of $238.00 S/D plus applicable taxes will be honored based on space availability. This rate is equal to the government per diem rate.

All hotel guests can enjoy free made-to-order breakfast, a complimentary early evening social daily and complimentary access to the fitness center. The hotel's standard destination fee is waived for guests booking within the official SANS room block.

This rate includes Internet in your room and is only available through Monday, April 5, 2027.

Book a Reservation
Chicago, Embassy Suites

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Business People Shaking Hands and Smiling

Travel Information

test

Embassy Suites by Hilton Chicago Downtown Magnificent Mile

Windy City views near Michigan Avenue. The suites feature views of downtown Chicago and Lake Michigan, two blocks from the Magnificent Mile. Only a 12-minute walk from entertainment, restaurants, and boat cruises at Navy Pier, and 8 minutes from the Chicago Riverwalk. The Theater District is within a mile. Enjoy free made-to-order breakfast and the complimentary early evening social.

Hotel Key Card
View Hotel

Venue Parking Details

- Self-Parking: $65 per day Rate listed is prevailing and subject to change. Alternative Parking Options - SANS recommends researching nearby parking facilities for more options. Below are some popular parking apps that can help you locate and reserve space during your training at SpotHero, ParkMobile, and ParkWhiz. Distance from Nearby Airports - Chicago O’Hare International Airport (ORD): Approximately 16.4 miles - Chicago Midway International Airport (MDW): Approximately 11.9 miles

Travel Arrangements and Parking
Google Maps

Hilton "Find Your Perfect Match" Status Match Promotion

Unlock Hilton Gold Status with staying 8 nights in a 90-day period. Did you know by staying just 8 nights in a 90-day period with Hilton, you can status match your current loyalty program to Hilton Gold Status? Hilton Gold Status provides exclusive perks such as a daily food and beverage credit, premium internet access, potential room upgrades based on availability, and many more benefits.

Hilton
View More

Save on Delta Flights to SANS Events

Delta Air Lines is pleased to offer special discounts for SANS Institute! Save 8% on Delta One/Delta First, 5% on Delta Premium Select/Comfort+, and 3% on Delta Main fares. Does not apply to Delta Main Basic. Book online using Meeting Code NM5CP, or call Conferences and Events® at 1.800.328.1111* Monday–Friday, 8:00 a.m. – 6:30 p.m. (EST) and refer to Meeting Event Code 'NM5CP'. *Please note there is not a service fee for reservations booked and ticketed via the reservation 800 number.

Delta
Book Your Flight

Save On United Flights To SANS Events

We are pleased to partner with United Airlines for air travel to our upcoming event. To make flight reservations online please book below and use discount code ZSZ5778017. You may also call United Meetings Reservation Desk Monday – Friday at (800) 426-1122 for booking assistance. Booking fees are waived for Meeting reservations. International customers may contact their local United Reservation Desk.

United
Book Your FlightOnline Booking Instructions

Frequently Asked Questions

Check-in times, classroom locations, and bonus sessions for SANS Chicago 2027 (April 26 - May 1, 2027) will be in the Event Guide at the top of this page a couple of weeks before event start.

Digital course materials open in your SANS Account seven days before class, so download them and confirm your laptop meets the course requirements before you travel.

Day-one classes start at 8:30 a.m. For everything else, from recordings to transfers, see the SANS Live Training FAQ or email support@sans.org.

Chicago runs from a first certification (SEC401, or SEC301 for non-technical staff) to SEC665 Advanced Red Team Operations, so a mixed-experience team can attend the same week. Shorter options include FOR528 Ransomware and Cyber Extortion (three days), SEC543 AI-Assisted Source Code Analysis (two days), and FOR563, a one-day course running local LLMs against forensic artifacts.

Yes. Courses run in person at the Embassy Suites Chicago Downtown Magnificent Mile or Live Online in Central Time, with the option to switch during the week. SEC541 Cloud Security Threat Detection is Live Online only at this event.

The Embassy Suites Chicago Downtown Magnificent Mile at 511 North Columbus Drive in Streeterville, two blocks from the Magnificent Mile. The SANS rate of $238 matches government per diem and includes free made-to-order breakfast and an evening social; the destination fee is waived for room-block guests.

Printed and digital course books, hands-on labs, and CPE credits, plus the option to switch to Live Online during the week. Live Online students also get four months of class recordings. You can add a GIAC certification attempt with two practice tests, or 120 days of extra OnDemand access.