SANS Stay Sharp Training - Live Online: Quickly sharpen your skills with 2-day management courses. Register now.


Washington, DC | Fri, Jun 14 - Sat, Jun 22, 2013
This event is over,
but there are more training opportunities.

Dear Colleague,

For more than 10 years, the Internet Storm Center has been providing free analysis and warning to our community. SANSFIRE 2013 is not just another training event. It is our annual "ISC Powered" event. It taps into the expertise behind our daily postings, podcasts, and data collection efforts by offering evening events focusing on current trends and actual relevant threats. The strength of the Internet Storm Center is its group of handlers, who are network security practitioners tasked with securing real networks just like you. This is your chance to meet some of them in person.

Some of this year's highlights include a talk by ISC handler Rob VandenBrink about the security aspects of Fiber Channel. Jim Clausing will teach you how to build an automated Android malware analysis lab, and Russ McRee, another STI graduate will explain the details of memory forensics using Volatility.

SANS will return to the Washington Hilton, Washington DC, June 15-22, with our top courses. Each evening, the ISC handlers will share riveting talks on their most interesting experiences and newest cyber hazards. These special presentations are free to everyone who pays for a course at SANSFIRE 2013.

SANSFIRE 2013 hosts world-class instructors teaching top-quality SANS courses covering penetration testing and hacker exploits, security, management, wireless, forensics, secure coding, and much more. See our Event-at-a-Glance page for the whole list of courses and links to course descriptions. We also have one- and two-day courses to round out your training, which will be available at a steeply discounted price if taken with a five- or six-day course.

All SANS courses directly address the kinds of incidents reported by the Internet Storm Center in their daily diaries. And, it's a SANS promise that what you learn you'll be able to apply immediately back at the office. Here is what past SANSFIRE attendees told us:

"SANS courses focus on what you really need to know to quickly improve the security in your organization." - Adan Lopez Sanchez, Jazz Aviation
"This has been my first SANS course/event and WOW! Great stuff." - Kevin Baun, SAIC
"Virtual system security is critical to our environment today. There is no other source for this type of training. SANS is it." - John Corey, Sealed Air
"My instructor (Rob Lee) was extremely knowledgeable, easy to understand, and made himself available before and after class. Clearly SANS employs top-notch instructors - the best in the business." - Celeste Rosenthal, Digital Discovery

Our campus location is the Washington Hilton. Discounted room rates of $199 Single/Double are available for SANS students through May 23. Government per diem rooms are available with proper ID. You must call the hotel and specifically ask for this rate (1-800-HILTONS). These special SANS rates include high-speed internet in your room. See our Location page to learn for about this hotel and its surroundings.

Can't make it to SANSFIRE this year? You can still be part of the action! SANS is proud to announce that SEC505, SEC401, SEC504, SEC575, and MGT414 will be Simulcast LIVE from DC. Students who register for a Simulcast class will attend remotely by logging into a virtual classroom and joining the live class. To register visit the Event Simulcast page, or email the Simulcast team at for additional details.

Plus, register and pay for SANSFIRE 2013 by May 1, and you can receive a $500 tuition fee discount.

You won't want to miss SANSFIRE 2013!

Marcus Sachs
Director, SANS Internet Storm Center

Johannes Ullrich,
Chief Research Officer, SANS

P.S. If you are not part of the active defensive community, we appreciate your continued support by submitting your logs and helping us make a difference: