2 More Days to Get Train-From-Home Tech with OnDemand Training: Apple TV + AirPods Pro

Security West 2020 - Live Online

Virtual, US Mountain | Mon, May 11 - Sat, May 16, 2020

In response to the escalation of the COVID-19 pandemic, we've made the decision to convert this training event into a Live Online event.

The courses below will take place online, using virtual software to stream live instructors to all registered students during the scheduled classroom hours. (Mountain Time) This alternate training format will allow us to deliver the cybersecurity training you expect while keeping you, our staff, and our instructors as safe as possible.

Your registration for a Live Online course includes electronically delivered courseware, live streaming instruction by a SANS instructor, course labs, and four months of online access to course recordings.

From Apple Seeds to Apple Pie

  • Sarah Edwards
  • Sunday, May 12th, 7:15pm - 8:15pm

Pattern-of-life data can provide a story about how a device and its user interact with each other. A user using their Mac or iPhone may have no idea how intimate of a picture can be extracted from the analytical data on their devices. An extremely creepy and granular picture in many cases. This data can be used in a variety of forensic investigations from criminal matters to device intrusions but may end of being a privacy nightmare if the data were to fall into the wrong hands.

This data tends to be stored in in a variety of databases and correlation of this data for analysis purposes can be difficult. Each database can hold different type of data, retain it for a different period of time, and have different storage mechanisms for its entries.

Each small seed of data can grow into a database providing delicious fruit that can be harvested to create a damn good apple pie. This presentation will show were each seed is stored, what type of apple it is, how to make the most out of it.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
  • Lunch & Learn: Short presentations given during the lunch break.
Monday, May 11
Session Speaker Time Type
SANS Live Online: SANS @MIC Talk - Coalfire penetration testers charged with criminal trespass Ben Wright Monday, May 11th, 6:30pm - 7:30pm SANS@Night
Tuesday, May 12
Session Speaker Time Type
Live Online Lunch & Learn: Mastering the Pivot from Alert to Investigate to Hunt Jason Mical Tuesday, May 12th, 12:30pm - 1:30pm Lunch and Learn
Live Online Lunch & Learn: Defend better, Respond faster Chris Bilodeau & Pierre Cadieux Tuesday, May 12th, 12:30pm - 1:30pm Lunch and Learn
Wednesday, May 13
Session Speaker Time Type
Live Online Lunch & Learn: Arming your SOC with SOAR in Today's Threat Landscape Jay Spann Wednesday, May 13th, 12:30pm - 1:30pm Lunch and Learn
Live Online Lunch & Learn: NTA/NSM and the MITRE ATT&CK James Schweitzer Wednesday, May 13th, 12:30pm - 1:30pm Lunch and Learn
Live Online Lunch & Learn: What's Next in Vulnerability Management Chris Carlson Wednesday, May 13th, 12:30pm - 1:30pm Lunch and Learn
SANS Live Online: SANS @Mic Talk - Cloud Native Payloads: A Matryoshka Doll of Exploits Moses Frost Wednesday, May 13th, 6:30pm - 7:30pm SANS@Night
Thursday, May 14
Session Speaker Time Type
SANS.edu Undergraduate & Graduate Programs Information Session Thursday, May 14th, 8:00am - 9:00am Special Events
Live Online Lunch & Learn: Ransomware recovery best practices: Importance of immutable backups Dan Trivett Thursday, May 14th, 12:30pm - 1:30pm Lunch and Learn