35+ Cyber Security Courses at SANS Cyber Defense Initiative® in Washington, DC! Save up to $300 thru 10/16.

Scottsdale 2019

Scottsdale, AZ | Mon, Feb 18 - Sat, Feb 23, 2019
This event is over,
but there are more training opportunities.


  • Jonathan Ham
  • Monday, February 18th, 7:15pm - 9:15pm

Everything leaves footprints on the network, whether it's a frontal assault on an Internet-facing SMB, or a lateral move living off the land with harvested creds. The Red Team only has the advantage up until the window breaks (I heard that!). Once you are in my house, I have the advantage (I know that squeaky floorboard!). Here's what it looks like when you think you can steal my stuff.

Obfuscate your Powershell 10x. Drop PEs via DDE and Word macros. DLL inject mimikatz. Evade AV. Fine. But to MitM you have to mess with L2/L3, and to move laterally you have to do things on L3/L4 that shouldn't be.

And, when you do, I can still see you.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Monday, February 18
Session Speaker Time Type
General Session - Welcome to SANS Ed Skoudis Monday, February 18th, 8:00am - 8:30am Special Events
492063616E207374696C6C2073656520796F7521 Jonathan Ham Monday, February 18th, 7:15pm - 9:15pm Keynote
Tuesday, February 19
Session Speaker Time Type
How to Hack the GIAC Jonathan Ham Tuesday, February 19th, 7:15pm - 8:15pm SANS@Night
Integrating security into Enterprise Architecture = Enterprise Security Architecture Mark Williams Tuesday, February 19th, 8:15pm - 9:15pm SANS@Night
Wednesday, February 20
Session Speaker Time Type
Instant Response: Making Your Systems As Hostile As Possible To Attackers Mick Douglas Wednesday, February 20th, 7:15pm - 8:15pm SANS@Night
Acquired Curiosity Kevin Tyers Wednesday, February 20th, 8:15pm - 9:15pm SANS@Night
Thursday, February 21
Session Speaker Time Type
Staying Offensive: The Changing Landscape of Offense Tim Medin Thursday, February 21st, 7:15pm - 8:15pm SANS@Night