Cybersecurity training without home or office distractions: 11 courses | San Francisco | Dec 2-7

Denver 2018

Denver, CO | Mon, Oct 15 - Sat, Oct 20, 2018
This event is over,
but there are more training opportunities.

OODA Security: Taking Back the Advantage

  • Kevin Fiscus
  • Monday, October 15th, 7:15pm - 9:15pm

OODA, or Observe, Orient, Decide and Act is a concept first developed for fighter pilots. The concept states that the adversary who can effectively complete the OODA cycle first will go home while the adversary who takes longer enjoys, at best, a long, slow parachute ride to the ground. This concept can be applied to information security. In theory, we defenders should have the advantage as it is our "house" the attackers are attacking. Unfortunately, that is rarely the case. Over 50% of organizations find out they have been compromised via notification by a third party meaning that all too often defenders don't even start their OODA loop until after the attacker has completed the compromise. Making things worse, traditional security controls are failing us because attackers already know how to circumvent or evade them. Fortunately, there is a solution. By making better use of our existing technology and by using some of the attackers tools and techniques against them, we can take to deter, distract, delay, disrupt and detect attackers. Come learn how we can turn the tables on the bad guys and reclaim the OODA loop initiative.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, October 15
Session Speaker Time Type
General Session - Welcome to SANS Bryan Simon Monday, October 15th, 8:00am - 8:30am Special Events
OODA Security: Taking Back the Advantage Kevin Fiscus Monday, October 15th, 7:15pm - 9:15pm Keynote
Tuesday, October 16
Session Speaker Time Type
Automate Post Exploitation with PowerShell Empire Nick Wiebelhaus Tuesday, October 16th, 7:15pm - 8:15pm SANS@Night
Adversary Emulations - Taking Attack Models and Penetration Testing to the Next Level Jorge Orchilles Tuesday, October 16th, 8:15pm - 9:15pm SANS@Night
Wednesday, October 17
Session Speaker Time Type
Everyone Wants to be a Pen Tester Serge Borso Wednesday, October 17th, 7:15pm - 8:15pm SANS@Night
Malware Analysis - Code of Conduct Anuj Soni Wednesday, October 17th, 8:15pm - 9:15pm SANS@Night
Thursday, October 18
Session Speaker Time Type
State of the Dark Web Matt Edmondson Thursday, October 18th, 7:15pm - 8:15pm SANS@Night