SANSFIRE 2025

Mon, Jul 14 - Sat, Jul 19, 2025
English

Jump to:

Event Highlights
Speakers
Schedule
Location

A Year’s Worth of Cybersecurity Training in 6 Immersive Days

Fast-track your success with an intensive week of top-tier training at SANSFIRE 2025. Whether you're just starting or sharpening advanced skills, this event is built to elevate your expertise with hands-on labs, real-world techniques, and guidance from some of the best minds in cybersecurity. You'll leave not just better prepared but armed with certifications that set you apart.

In a field that never stands still, staying ahead is more than important—it’s a necessity. This is more than just training; it’s your chance to transform your career, deepen your knowledge, and connect with a network of industry leaders who share your passion for growth and innovation.

Innovative Courses, Industry-Leading Instructors

Choose from over 40 courses tailored for every practitioner, from foundational skills to cutting-edge innovations, that dive deep into topics like:

Incident Response
Hacker Tools and Techniques
ICS/SCADA Security Essentials
Cyber Threat Intelligence
AI/Machine Learning

and many more!

Plus, enjoy bonus after-class extras like hands-on workshops, expert-led talks, and networking events that extend value far beyond the classroom.

Your evolution begins here. Join SANS and transform your future.

Students Say

Slide 1 of 4
SANS creates a one-of-a-kind learning experience providing world-class training and fascinating opportunities to network and gain new perspectives from your peers!
Justin E.U.S. Federal Agency
Slide 2 of 4
The instruction at SANS is top-notch. I have been to several SANS training courses and they never disappoint. The instructors bring real life experiences and show the students how the material can be applied.
Thomas SeckJohns Hopkins APL
Slide 3 of 4
The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
Ryan MoellerEureka Strategic Consulting
Slide 4 of 4
SANS training keeps individuals up-to-date with relevant cyber security information. I can now apply the skills learned towards further maturing my program.
Nicholas MarriottPfizer

Event Highlights

Exclusive Industry Leading @Night Talks & Keynote Presentations

Hear from SANS expert instructors, during our keynote session and during SANS@Night talks for the latest techniques.

Learn More

NetWars Tournaments

Put your skills to the test in an adrenaline-pumping competition! Join your classmates at Core or Cyber Defense NetWars Tournament for an exclusive challenge included free with your course registration.

Learn More

SANS Community Night: Find Your People

Once SANS Alumni, Always SANS Alumni. Step into the ultimate cybersecurity gathering where your community awaits! Whether it’s your first SANS event or a return to your roots, Community Night is your chance to connect, celebrate, and grow with the industry’s brightest minds. Enjoy an evening filled with networking, bites, beverages, exciting giveaways, and thought-provoking discussions. This isn’t just an event—it’s your gateway to meaningful connections and shared passion with the support of a thriving cybersecurity family. #FindYourPeople

Learn More

Limited Time Cyber-Pro Pass

Join us in Washington, D.C at SANSFIRE and unlock special savings when you register to attend in-person. A $3,240 value!* Unlock the OnDemand Bundle which includes 4-months of course and lab learning access after your training with live SME support. Plus, free access to play in the Core NetWars Tournament during your training week on Thurs, July 17 - Fri, July 18. Compete against your classmates in the ultimate multi-disciplinary cyber range that powers up the most diverse cyber skills. *Offer limited. Available while supplies last.

Featured Speakers

Monta Elkins

Hacker-in-Chief

Monta Elkins is currently "Hacker-in-Chief" for FoxGuard Solutions, an ICS patch provider. A security researcher and consultant; he was formerly Security Architect for Rackspace, and the first ISO for Radford University.

Learn more

Rich Greene

Senior Solutions Engineer

Rich is a seasoned cybersecurity professional with over two decades of experience in the cyber domain. He has participated in offensive and defensive cyber operations for the Department of Defense (DoD) in more than 17 countries.

Learn more

John Hubbard

Consultant

John redefined modern SOC operations by engineering globally adopted blue team strategies and co-creating the GSOC cert. Through the Blueprint podcast and SANS leadership, he’s unified thousands of defenders around real-world detection tactics.

Learn more

Frank Kim

Venture Advisor

Frank Kim is the Founder of ThinkSec, a security consulting and CISO advisory firm. He leads the Cybersecurity Leadership and Cloud Security curricula at SANS, as well as authors and instructs multiple SANS courses.

Learn more

Robert M. Lee

CEO

A former U.S. Air Force cyber warfare officer, Robert led the NSA’s first mission targeting threats to industrial infrastructure. Now at Dragos, he spearheads global defense of critical systems, shaping national policy and industry threat response.

Learn more

Dr. Johannes Ullrich

Dean Of Research

Dr. Johannes Ullrich is the Dean of Research for SANS Technology Institute, a SANS Faculty Fellow, and founder of the Internet Storm Center (DShield.org) which provides a free analysis and warning service to thousands of Internet users and organizations.

Learn more

Schedule

Bonus Session

Engage in extra learning and activities during SANS events.

NetWars Tournaments

Hands-on competitions to test and sharpen your cybersecurity skills.

Social & Community Events

Network and collaborate with cybersecurity professionals.

Showing 1 of 14

Filter by:

Select day:

SANSFIRE 2025 Welcome Reception

Kick off your SANSFIRE 2025 experience at the Welcome Reception. Be a part of this kickoff event and join the industry’s most powerful gathering of cybersecurity professionals. Share stories, make connections, and learn how to make the most out of your training this week in Washington, DC. Beverages (adult and otherwise) and bites will be served. Hope to see you there!

06:30PM - 08:00PM EDT

In-Person

SANS@Night: How I Changed the Way I Use AI in 2025

I've been a heavy user of AI since the beginning, but the way that I use AI has recently shifted. In this fast-paced, fun talk, we'll cover the top ways that I've improved my efficiency and productivity by changing the way I interact with AI so far in 2025.

06:00PM - 07:00PM EDT

Presented by

Matt Edmondson

Senior Instructor

In-Person & Virtual

Live Online Registration

SANS@Night: How To Use AI To Design A C2 Framework

Like it or not, AI is here to stay, so why not embrace it and the capabilities offered. This talk will showcase how to use two different models to design a custom C2 framework from scratch. Privacy concerns will also be addressed during the talk and will highlight how to maintain control of sensitive company information, or just information you don't want a model to have. Attendees will understand how to feed a model various prompts to get what is desired as well as how to begin the implementation of what's given back to you from your prompt's response. Those is a dev-like role should attend this talk, but it is also open to anyone who might be curious about the process.

07:00PM - 08:00PM EDT

Presented by

Jonathan Reiter

Certified Instructor

In-Person & Virtual

Live Online Registration

SANS Community Night

Join us for a special "Community Night" at SANSFIRE 2025. This gathering is open to all cybersecurity professionals and designed to foster connections across the entire spectrum of our community — from newcomers to seasoned experts.

05:30PM - 06:30PM EDT

In-Person

Invited Community Members Register Here

Internet Storm Center Keynote: Squirrels - Taming AI Distractions for Smarter Security Operations

For security operations, distractions can be dangerous. A “denial of service” against a defender often leads to missed alerts and compromise. The tool must never be the focus but the results the tool provides should determine the value of the tool. AI tools are currently in the “new and cool” phase of the hype cycle. There is no week without a major new AI development. As a result, defenders tend to spend a lot of time trialing new tools and little time properly integrating them into security operations. During this presentation, we interview several defenders to learn what turned out to be just a distraction, or what tools turned out to be a game changer for operations once properly integrated.

06:45PM - 07:45PM EDT

Presented by

Dr. Johannes Ullrich

Fellow

In-Person

SANSFIRE 2025 Presents Women’s Connect: Empower. Inspire. A Networking Reception in Partnership with WiCyS

Join us for an exclusive evening of connection and inspiration at SANSFIRE 2025 Women’s Connect, hosted in partnership with Women in CyberSecurity (WiCyS). This special gathering is open to SANS students and members of the local cybersecurity community — from CISOs to early-career practitioners.

05:30PM - 06:30PM EDT

In-Person

Invited Community Members Register Here

SANSFIRE 2025 Honeypot Workshop

Speakers: Internet Storm Center Handlers, Guy Bruneau and Jesse La Grew

Become part of the largest, oldest, and most open sensor network on the internet. Learn how to build, configure, and operate your very own honeypot. We will provide up to twenty honeypots free on a first-come basis. You are also welcome to bring your own Raspberry Pi, n100, or similar system (or cloud account).

This is a hands-on session and requires some familiarity with Linux. Once deployed, the three honeypots submitting data most consistently for the first three months will have a yet-to-be-announced prize.

06:00PM - 07:00PM EDT

In-Person

SANS@Night: Back to Basics (and Having a Blast): Why Cybersecurity Fundamentals Still Rule in a High-Tech World

Buckle up for a lively ride through the wild world of cybersecurity! Sure, today’s tech landscape is all about AI, quantum computing, and other fancy buzzwords that make your head spin but guess what? None of that cutting-edge stuff means squat if you’re ignoring the good old basics. In this upbeat, interactive session, we’ll dive into why the tried-and-true fundamentals (think password hygiene, patch management, and access controls) are the secret sauce to surviving and thriving in the age of ever-evolving cyber threats. Prepare for real-life “oops” moments, plenty of laughs, and hands-on tips you can actually use. This is not your buttoned-up, corporate snooze-fest: you’ll leave inspired, empowered, and ready to fortify your digital defenses with good vibes and rock-solid basics. Let’s have some fun getting back to what really matters!

06:00PM - 07:00PM EDT

Presented by

Rich Greene

Certified Instructor

In-Person & Virtual

Live Online Registration

Tournament: Core NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Core NetWars: The most comprehensive of the NetWars ranges, this ultimate multi-disciplinary cyber range powers up the most diverse cyber skills. This range is ideal for advancing your cybersecurity prowess in today's dynamic threat landscape. The winning team and the top five solo players from every Core NetWars tournament throughout the year are offered a chance to compete in the annual SANS Core NetWars Tournament of Champions.

06:30PM - 09:30PM EDT

In-Person

SANS@Night: Rethinking the Weakest Link: Human Roles in AI-Driven Cybersecurity

Speaker: Deborah Kariuki, Graduate Program Director, MAE-UMBC

The persistent framing of users as the “weakest link” in cybersecurity has long shaped how risks and responsibilities are distributed in digital systems. However, in the age of artificial intelligence (AI), this narrative demands reexamination. As AI increasingly mediates critical decisions, from authentication to threat detection, the question of “who or what” constitutes the weakest link becomes more complex.

06:45PM - 07:45PM EDT

In-Person

Tournament: Cyber Defense NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Cyber Defense NetWars: Focused on preventing, analyzing, and defending against complex real-world attack scenarios, including brute-force attacks and ransomware campaigns.

07:15PM - 10:15PM EDT

In-Person

SANS@Night: Unlocking Secrets: Keypad Safe Attack Using Side-Channel Timing And Pulseview

In this demo of hardware hacking, we'll introduce PulseView - the 'Wireshark of hardware hacking' - and demonstrate a technique to unlock a keypad safe. Our method? A Side-Channel Timing Attack, which relies on the timing discrepancies in the user interface.

Using an affordable logic analyzer (priced under $15), we'll capture microsecond changes in response times tied to incorrect passcodes. By leveraging this side-channel data, we will carefully decipher the true passcode of the safe. Unique Approach: Traditional hacking often focuses on software vulnerabilities to exfiltrate sensitive data.

06:00PM - 07:00PM EDT

Presented by

Monta Elkins

Principal Instructor

In-Person & Virtual

Live Online Registration

Tournament: Core NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

06:30PM - 09:30PM EDT

In-Person

Tournament: Cyber Defense NetWars

Registration: All students who register for a 4-6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Cyber Defense NetWars: Focused on preventing, analyzing, and defending against complex real-world attack scenarios, including brute-force attacks and ransomware campaigns.

07:15PM - 10:15PM EDT

In-Person

Washington Hilton

Hotel Special Rates & Reservations

A special discounted rate of $207.00 S/D plus applicable taxes will be honored based on space availability. When booking through the links below, the $25 daily resort fee will be waived. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

These rates include Internet in your room, complimentary access to the fitness center, and are only available through Friday, June 20, 2025.

Book A Regular Reservation Book A Government Per Diem Reservation

3 Reasons To Stay At The Event Venue

Ultimate Convenience
Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.
Seamless Networking Opportunities
Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.
All Day, All Event Access
SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Travel Information

- Self-Parking: $56.00 *Rates subject to change. Please contact the venue for the most up to date information. Alternative Parking Options SANS recommends researching nearby parking facilities for more affordable options. Below are some popular parking apps that can help you locate and reserve space during your training are SpotHero, ParkMobile, and ParkWhiz. Distances from Nearby Airports - Ronald Reagan Washington National Airport (DCA): Approximately 7.9 miles. - Dulles International Airport (IAD): Approximately 29.0 miles. - Baltimore-Washington International Airport (BWI): Approximately 33.9 miles.

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

SANSFIRE 2025

Share

A Year’s Worth of Cybersecurity Training in 6 Immersive Days

Innovative Courses, Industry-Leading Instructors

Students Say

Event Highlights

Exclusive Industry Leading @Night Talks & Keynote Presentations

NetWars Tournaments

SANS Community Night: Find Your People

Limited Time Cyber-Pro Pass

Featured Speakers

Monta Elkins

Rich Greene

John Hubbard

Frank Kim

Robert M. Lee

Dr. Johannes Ullrich

Schedule

Bonus Session

NetWars Tournaments

Social & Community Events

SANSFIRE 2025 Welcome Reception

SANS@Night: How I Changed the Way I Use AI in 2025

SANS@Night: How To Use AI To Design A C2 Framework

SANS Community Night

Internet Storm Center Keynote: Squirrels - Taming AI Distractions for Smarter Security Operations

SANSFIRE 2025 Presents Women’s Connect: Empower. Inspire. A Networking Reception in Partnership with WiCyS

SANSFIRE 2025 Honeypot Workshop

SANS@Night: Back to Basics (and Having a Blast): Why Cybersecurity Fundamentals Still Rule in a High-Tech World

Tournament: Core NetWars

SANS@Night: Rethinking the Weakest Link: Human Roles in AI-Driven Cybersecurity

Tournament: Cyber Defense NetWars

SANS@Night: Unlocking Secrets: Keypad Safe Attack Using Side-Channel Timing And Pulseview

Tournament: Core NetWars

Tournament: Cyber Defense NetWars

Washington Hilton

3 Reasons To Stay At The Event Venue

Ultimate Convenience

Seamless Networking Opportunities

All Day, All Event Access

Travel Information

Washington Hilton

Venue Parking Details

Hilton "Find Your Perfect Match" Status Match Promotion

Save on United Flights To Live Events

Save on Delta Flights To Live Events

SANSFIRE 2025 Welcome Reception

SANS@Night: How I Changed the Way I Use AI in 2025

SANS@Night: How To Use AI To Design A C2 Framework

SANS Community Night

Internet Storm Center Keynote: Squirrels - Taming AI Distractions for Smarter Security Operations

SANSFIRE 2025 Presents Women’s Connect: Empower. Inspire. A Networking Reception in Partnership with WiCyS

SANSFIRE 2025 Honeypot Workshop

SANS@Night: Back to Basics (and Having a Blast): Why Cybersecurity Fundamentals Still Rule in a High-Tech World

Tournament: Core NetWars

SANS@Night: Rethinking the Weakest Link: Human Roles in AI-Driven Cybersecurity

Tournament: Cyber Defense NetWars

SANS@Night: Unlocking Secrets: Keypad Safe Attack Using Side-Channel Timing And Pulseview

Tournament: Core NetWars

Tournament: Cyber Defense NetWars