Last day to save $500 off interactive Live Online courses taught by industry experts during SANS 2021!

SANS instructors produce thousands of free content-rich resources for the information security community annually. These resources are aimed to provide the latest in research and technology available to help support awareness and growth across a wide range of IT and OT security considerations.



Free Training and Events

  • Test Drive 45+ SANS Courses – If you're new to SANS or unsure of the subject area or skill level to select for your next training course, SANS offers free one-hour course previews via our OnDemand platform.
  • Capture the Flag Cyber Challenges – Variety of fun and engaging CTF events suited for people across the cybersecurity community.
  • Cyber Aces – SANS Cyber Aces Online is an online course that teaches the core concepts needed to assess, and protect information security systems.
  • Tech Tuesday Workshops - Hands-on virtual environments that give you the opportunity to dive into course material.
  • ICS Security Summit – March 4-5 - The annual ICS Security Summit brings together the industry's top practitioners and leading experts from around the globe to share actionable ideas, methods, and techniques for safeguarding critical infrastructures.
  • CloudSecNext Summit & Training 2021 – June 3-4 - CloudSecNext Summit & Training will bring together a unique combination of real-world user experiences and case studies, as well as practical, technical training focused on specific approaches and skills for building and maintaining a secure cloud infrastructure. As a virtual attendee, you’ll explore current approaches, tools, and techniques with fellow practitioners facing similar cloud-related security challenges.

Cybersecurity News, Updates & Content


Security Awareness Planning Kit

The Security Awareness Planning Kit is made up of the top resources, templates, and checklists from the SANS two-day MGT433 course. The Planning Kit enables you to quickly build and/or improve your security awareness program using resources developed and proven by the SANS Security Awareness Community. Get Planning Kit.

Everything you need to create a secure work-from-home workforce during the COVID-19 pandemic and beyond.

Quickly train employees to work (and children to learn) from home safely and securely. The resources below are a combination of SANS public resources and paid training materials, which we are releasing for free to support the community during this unique situation. Download Resource.

  • For Organizations: Securely Working From Home Deployment Kit
  • For Individuals: Securely Working From Home Factsheet
  • For Parents: Securing Your Kids Online Videos and Tips

Tips for Secure Video Conferencing

Video conferencing has become a key part of staying connected while working at home. However, this technology is new for many and often changing. Here are key tips on how to use video conferencing software securely for both individuals hosting a conference and those attending. Download the Tip Sheet.


Global Community Capture-the-Flag Challenges

Participate in a free, global capture-the-flag event run by our NetWars and R&D teams. Rotating challenges keep your learning fresh, regardless of your experience level or specialty.

Upcoming Events:
Global Community CTF: Mini Bootup         Feb. 17-18
Global Community CTF: Mini NetWars       Apr. 1-2
Global Community CTF: Mini Bootup         Jun. 10-11


View Ranges Schedule

Tools & Workstations

  • SIFT® - A digital forensics and incident response-based Linux distribution bundling most open-source DFIR tools available.
  • REMnux® - A free Linux toolkit for assisting malware analysts with reverse-engineering malicious software.
  • EZTools - Cutting-edge open-source windows based digital forensics tool suite for scalable, scriptable, fast forensics.
  • Slingshot - A penetration testing Linux distribution bundling many pentesting tools.
  • SOF-ELK® - "Big data analytics" platform composed of Elastic stack, logstash, Kibana (ELK) to make large scale analysis easier.
  • APOLLO - Apple Pattern of Life Lazy Output'er (APOLLO) extracts and correlates usage data from Apple devices.
  • DeepBlueCLI - Powershell Event Log Hunting Module.
  • KAPE - Rapid Triage Forensic Artifact Acquisition and Processing Tool.
  • The C2 Matrix - Matrix of Command and Control Penetration Testing Frameworks.
  • The Pyramid of Pain - Threat Intelligence Adversary Cost of Operations Model.
  • Hunting Maturity Model - Threat Hunting Evaluation Model.

Scholarship & Community Programs

*These programs are free to attendees, with some supported by outside grants, sponsorships, and scholarships.



Join the SANS Community

Gain access to free tools, resources, and the latest cyber security news that can't be found elsewhere.


Join Today