世界水準の専門家主導によるサイバーセキュリティトレーニング。 AI時代のために設計されています

Strengthening the Foundation: Implementing SANS ICS Controls 1 and 2

In this session, we dive into the first two pillars of the SANS Top 5 Critical ICS Controls: ICS Incident Response and Defensible Architecture.

Beyond MFA: A Defender's Guide to Token Theft and AiTM

MFA alone can’t stop token theft and AITM attacks. This session shows defenders how phishing-resistant authentication, Conditional Access, Continuous Access Evaluation, and token controls can strengthen identity defenses.

SANS 2026 Cloud Security Exchange with AWS, Google & Microsoft

Join the 5th annual SANS Cloud Security Exchange—a one-of-a-kind virtual event where cloud and cybersecurity experts from SANS Institute, Amazon Web Services, Google Cloud, and Microsoft will come together to share thought leadership and technical insights.

Cloud Security Exchange Summit Solutions Track

SANS 2026 Cloud Security Exchange Summit Solutions Track delivers a focused look at the tools, architectures, and operational strategies driving secure and resilient cloud environments across AWS, Google Cloud, and Microsoft Azure.

Can (A)I Hack It? Reflections of a Regulator

AI has become both a subject of regulatory attention and a tool for threat actors, operators and regulators alike. A recovering electrical engineer will share his journey into telco cyber regulation, and his hits and misses with AI along the way.

SANS San Antonio 2026 - SANS@Night: Bootstrap: How To Start Anything

This talk is about how to bootstrap almost anything, whether it’s a company, an open source project, a personal pursuit, a charity, a conference, or just about anything else.

SANS San Antonio 2026 - SANS@Night: Breaking the Black Box: An Introduction to Adversarial AI

This session, based on the new SEC536: AI Penetration Testing course, shifts focus from AI's capabilities to its role as a new attack vector, encouraging critical evaluation of its use. Live demonstrations will show how production-grade AI assistants can be manipulated to bypass safeguards, leak confidential data, and perform prohibited actions.

From Tools to Telemetry: A Playbook for Modern Detection and Response in Resource-Constrained Teams

This webcast explores why the traditional tool-first approach to security operations is failing resource-constrained teams and what modern detection and response programs must do instead.

SANS Cloud Security Exchange Summit & Training 2026 - SANS@Night: Guardrails for AI Coding

This session focuses on AI coding guardrails: practical, developer-friendly controls that help teams adopt coding assistants with confidence while maintaining strong security, governance, and assurance.

The Agentic SOC: AI-Powered Detection, Investigation, and Response with Google SecOps

In this webcast, SANS Senior Instructor Dave Shackleford will explore what an Agentic SOC looks like in practice using Google SecOps.

Q-Day is Coming: Are You Ready Post Quantum Cryptography?

This session provides a practical, business-aligned introduction to Post-Quantum Cryptography (PQC) for security and risk leaders

What’s New in SEC660: Advanced Penetration Testing in the AI Era

AI can accelerate advanced pentesting, but only if you can validate the results. Join Stephen Sims for a look at SEC660 updates on AI-assisted reversing, debugging, vuln research, and exploit development without losing technical edge.

Modern OSINT Investigations: From Website Analysis to AI-Powered Threat Intelligence

In this session, SANS instructors Matt Edmondson and Ngô Minh Hiếu (Hiếu PC), CEO of ChongLuaDao, will demonstrate how modern OSINT techniques and AI-powered workflows are transforming cyber investigations.

SANS Virginia Beach 2026 - Extending Protocol-SIFT to Linux

Protocol-SIFT has been getting a lot of attention lately, but the first release was 100% focused on Windows investigations. In this talk, we'll look at what it takes to extend this to cover Linux investigations.

Intro to WinDbg Part 5: Advanced Usage - A Recommendation for SEC665

Get deeper with WinDbg in this advanced session for offensive researchers. Explore dx, variables, custom functions, memory editing, extensions, and live user- and kernel-mode debugging to build confidence for SEC665-level red team work.

2026 Retrospective and What to Budget for in 2027

Cyberattacks accelerated last year with the rise of AI, while the familiar root causes remained largely unchanged. Industry reporting shows record ransomware victim counts and a sharp increase in active threat groups, with AI accelerating phishing and data triage. However, the primary causes continue to be exploited vulnerabilities and resource gaps.

SANS 2026 Security Awareness and Culture Report: Unpacking the Data with Lance Spitzner

In this webcast, report authors Lance Spitzner and Rachael Saffer walk through the complete findings of the 2026 report. In it, they cover where the industry currently stands, how the risk landscape is shifting, and what this year's practitioner responses reveal about the state of the field today.

SANS Virginia Beach 2026 - SANS@Night Talk: Twelve Against Thousands: The Special Forces Playbook for Outnumbered Security Teams

Most security teams I’ve worked with and helped have a handful of people defending thousands. Yet we expect them to cover everything, watch everything, and control everything, like they have an army’s headcount to do it.

SANS AI Security Training August 2026 - Lunch and Learn: Securing AI in an AI Focused World

AI is a major topic of discussion today—and rightfully so. But for those of us in cybersecurity, it's crucial not only to understand how to use AI for security, but also to recognize the threats targeting AI models, their ecosystems, and how to defend and secure them effectively.

SANS AI Security Training August 2026 - SANS@Night: Evolving AppSec: Using Agentic Workflows and Building Secure AI Systems

Attendees will walk away with a clear mental model of where AI accelerates AppSec, where AI must be defended, and how to adopt vendor AI responsibly, all supported by open-source frameworks and ready to use resources.