Got GIAC? Free GIAC Cert Attempt Included with OnDemand 5 or 6 Day Training thru July 7

SANS instructors produce thousands of free content-rich resources for the information security community annually. These resources are aimed to provide the latest in research and technology available to help support awareness and growth across a wide range of IT and OT security considerations.

free training

Free Training and Events

  • Test Drive 45+ SANS Courses – If you're new to SANS or unsure of the subject area or skill level to select for your next training course, SANS offers free one-hour course previews via our OnDemand platform.
  • Capture the Flag Cyber Challenges – Variety of fun and engaging CTF events suited for people across the cybersecurity community.
  • Cyber Aces – SANS Cyber Aces Online is an online course that teaches the core concepts needed to assess, and protect information security systems.
  • Tech Tuesday Workshops - Hands-on virtual environments that give you the opportunity to dive into course material.
  • Purple Team Summit – May 24-25 – The Purple Team Summit will bring together leading security practitioners to explore practical uses of threat emulation tactics, detection capabilities, and security controls. Experts will draw upon their own experiences and share current purple team concepts that you can implement within your own security program
  • CloudSecNext Summit & Training 2021 – June 3-4 – CloudSecNext Summit & Training will bring together a unique combination of real-world user experiences and case studies, as well as practical, technical training focused on specific approaches and skills for building and maintaining a secure cloud infrastructure. As a virtual attendee, you’ll explore current approaches, tools, and techniques with fellow practitioners facing similar cloud-related security challenges.
  • SOAR Solutions Forum – June 18 – Led by Chris Crowley, this free virtual solutions forum will dive into all things SOAR related. Attendees will walk away with actionable takeaways and knowledge behind running and effective SOAR platform. Join leading experts and like minded individuals for this insightful half day event!
  • DFIR Summit & Training 2021 – July 22-23 – The annual SANS Digital Forensics & Incident Response (DFIR) Summit is the most comprehensive DFIR event of the year, bringing together a passionate and influential group of experts, cutting edge research and tools, immersive training, and industry networking opportunities.
cyber news

Cybersecurity News, Updates & Content

Security Awareness Planning Kit

The Security Awareness Planning Kit is made up of the top resources, templates, and checklists from the SANS two-day MGT433 course. The Planning Kit enables you to quickly build and/or improve your security awareness program using resources developed and proven by the SANS Security Awareness Community. Get Planning Kit.

Tips for Secure Video Conferencing

Video conferencing has become a key part of staying connected while working at home. However, this technology is new for many and often changing. Here are key tips on how to use video conferencing software securely for both individuals hosting a conference and those attending. Download the Tip Sheet.


Global Community Capture-the-Flag Challenges

Participate in a free, global capture-the-flag event run by our NetWars and R&D teams. Rotating challenges keep your learning fresh, regardless of your experience level or specialty.

Upcoming Events:
Global Community CTF: Mini Bootup         Jun. 10-11
Cyber42: Vulnerability Management       Jun. 22
Cyber42: CISO For A Day         Jul. 27

View Ranges Schedule


Tools & Workstations

  • SIFT® - A digital forensics and incident response-based Linux distribution bundling most open-source DFIR tools available.
  • REMnux® - A free Linux toolkit for assisting malware analysts with reverse-engineering malicious software.
  • EZTools - Cutting-edge open-source windows based digital forensics tool suite for scalable, scriptable, fast forensics.
  • Slingshot - A penetration testing Linux distribution bundling many pentesting tools.
  • SOF-ELK® - "Big data analytics" platform composed of Elastic stack, logstash, Kibana (ELK) to make large scale analysis easier.
  • APOLLO - Apple Pattern of Life Lazy Output'er (APOLLO) extracts and correlates usage data from Apple devices.
  • DeepBlueCLI - Powershell Event Log Hunting Module.
  • KAPE - Rapid Triage Forensic Artifact Acquisition and Processing Tool.
  • The C2 Matrix - Matrix of Command and Control Penetration Testing Frameworks.
  • The Pyramid of Pain - Threat Intelligence Adversary Cost of Operations Model.
  • Hunting Maturity Model - Threat Hunting Evaluation Model.

Scholarship & Community Programs

*These programs are free to attendees, with some supported by outside grants, sponsorships, and scholarships.

Join the SANS Community

Gain access to free tools, resources, and the latest cyber security news that can't be found elsewhere.

Join Today