SEC536: Adversarial AI - Penetration Testing AI Systems


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact Us
Earn 30 CPEs.
Course material is geared for cybersecurity professionals with hands-on experience.
Apply what you learn with hands-on exercises and labs.
Ask most SOC managers what their team is worth to the business, and you might get a count of closed alerts. That answer has never convinced a CFO, and it does not tell you whether the SOC is getting better.
LDR551 gives you a different set of instruments. Across five days of live, virtual instruction, you break security operations into functions that can be measured and improved, then connect each one to something the business already cares about. You leave with a way to track defensive coverage, a standard for detection quality, and metrics that survive contact with an executive.
The final section addresses AI and automation in security operations directly, including analytic testing, adversary emulation, and where automation scales a team versus where it quietly hides a gap. You’ll get 30 CPE credits for this course, and it’s aligned to the GIAC Security Operations Manager (GSOM) certification.
SOC managers and team leads, security directors, security program managers, senior analysts moving into leadership, and technical CISOs. It works for building a SOC from nothing and for fixing one that already exists.
I really enjoy the labs because they give me the chance to put theory into practice in a hands-on way. They are well-designed, clear, and paced so that I can steadily build confidence without feeling rushed. Each lab reinforces the course content and shows how the concepts apply in real-world scenarios, which makes the learning experience much more engaging and practical. Overall, the labs make the course feel interactive, relevant, and rewarding, helping me truly master the material.
I would wholeheartedly recommend this course — it felt like being sorted straight into the right House, where everything simply fit. The knowledge gained is practical spell work for the real world, the labs are like safe but thrilling duels to hone your craft, and the instructor was a true master of the art. Anyone seeking to strengthen their defenses in the cyber realm will find this course as invaluable as a wand in a wizard’s hand.
Some really insightful parts of the course that had got me thinking about how we operate our own SOC - within 2 days I already have several actions that I can take.
To learn more about LDR551, business takeaways, laptop requirements, and more, please visit the course page.
Save $750 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by November 17, 2026.
Looking for Group Purchasing? Contact Sales
2 Free practice tests when you add a certification exam attempt to your course. Available for select courses below.
Add OnDemand Extended Access for 120 days to help you prepare for your GIAC exam. Available for select courses below.


John is a Senior SANS Instructor and SOC consultant, author of SEC450 and LDR551. With deep SOC leadership experience, GIAC certifications, and hands-on labs, he equips cyber defenders with the skills to hunt, detect, and lead resilient operations.
Read more about John HubbardEliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need right from your home.
Hands-on learning with the opportunity to ask questions and receive instant feedback from world-renowned experts. Afterward, reinforce your skills with 4-months of access to daily course lecture archives.
Learn cutting-edge cybersecurity knowledge with hands-on labs that provide you with techniques you can immediately use in your organization.

