Students must use proper cyber security and analysis tools to complete a lab. In many cases, multiple devices and multiple steps are needed.Each student is armed with a virtual machine (VM) or tools that do not require complex installation.Many VM environments are set up so that you can use the same tools when back in your environments on similar complex scenarios you might encounter daily.

2. Real-World Scenarios

Authors design labs based on current and real-world challenges they encounter daily in their jobs, investing months creating complex, believable, and realistic scenarios using existing threat actor.SANS interactive ranges and threat-based attack data are built from the ground up, mimicking organizations and entities that come under attack weekly.These environments are so believable that SANS instructors are often asked how we received permission to use "real" attack data to teach students in class.

3. Self-Correcting Instructions

The labs include self-correcting instructions with a step-by-step online workbook to walk students through complex labs.If you get stuck, an intricate hint and learning system with embedded videos is built to explain each step thoroughly.If needed, the student can unhide the exact command to input or utilize the tool to complete the step.

4. Engaging Competition

SANS labs use both capture-the-flag and other in-class competitions.One of the best ways to learn is to make reviewing key learning objectives competitive and a game, with a digital scoreboard for tracking progress, gamifying the learning objectives, and encouraging leveling up.Many students can compete for skills-based prizes and end-of-class challenge coins — coveted awards around the entire information security community.

SANS Cybersecurity Labs

Hands-On Cybersecurity Interactive Labs and Range Environments Help Students Develop Necessary Skills

Find a Course

Practice, Refine, and Reinforce Course Objectives

SANS Cybersecurity Labs provide an immersive, hands-on experience that reinforces learning objectives and critical course skills.

Created by world-class SANS authors and based on their real-world experiences in the field, SANS labs allow you to analyze data from real compromises. Through real-life scenarios and engaging challenges, students can practice, refine, and reinforce critical job skills.

Find A Course. Experience Labs.

Lab Statistics

1800

Total # of Labs

40%

Average % of Course

1396

Total Number of Hours

NICE Roles Directly Mapped to SANS Labs

What SANS Students Are Saying

Slide 1 of 4
This was my first SANS training and I'm impressed. Content was at the right level, good explanation, room for [the instructor] to add their examples, and enough time for questions.
Joey CroonenbroekAccenture
Slide 2 of 4
The labs from all SANS courses are always top notch. I have taken SANS training since 2007 and it has always maintained the highest level/standards, without question the best training content on the planet.
Nicolas Stevens
Slide 3 of 4
What is great about the labs is that they are broken down so that they’re easy to follow, and they build upon the previous labs, which enforces things we learned/utilized in previous labs.
Joseph Morales
Slide 4 of 4
Learning via labs allows me to grasp the idea of how to manage different challenges without disengaging from the material. The short and challenging labs provided exercises that I can build on to apply in my environment.
Carlos Pino

Explore the Four Key Components of SANS Cybersecurity Labs

Students must use proper cyber security and analysis tools to complete a lab. In many cases, multiple devices and multiple steps are needed.
Each student is armed with a virtual machine (VM) or tools that do not require complex installation.
Many VM environments are set up so that you can use the same tools when back in your environments on similar complex scenarios you might encounter daily.

Authors design labs based on current and real-world challenges they encounter daily in their jobs, investing months creating complex, believable, and realistic scenarios using existing threat actor.
SANS interactive ranges and threat-based attack data are built from the ground up, mimicking organizations and entities that come under attack weekly.
These environments are so believable that SANS instructors are often asked how we received permission to use "real" attack data to teach students in class.

The labs include self-correcting instructions with a step-by-step online workbook to walk students through complex labs.
If you get stuck, an intricate hint and learning system with embedded videos is built to explain each step thoroughly.
If needed, the student can unhide the exact command to input or utilize the tool to complete the step.

SANS labs use both capture-the-flag and other in-class competitions.
One of the best ways to learn is to make reviewing key learning objectives competitive and a game, with a digital scoreboard for tracking progress, gamifying the learning objectives, and encouraging leveling up.
Many students can compete for skills-based prizes and end-of-class challenge coins — coveted awards around the entire information security community.

More Testimonials From SANS Students

Slide 1 of 4
The best part of each day is the labs, providing the chance to get hands-on with the tools and utilize skills learned throughout the day.
Aaron Strozier
Slide 2 of 4
The lab exercises are very well selected to give us exposure to powerful tools, while respecting different skill levels and preventing the overall class from getting too bogged down.
Travis Ward
Slide 3 of 4
The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
Ryan MoellerEureka Strategic Consulting
Slide 4 of 4
The labs were very hands-on, and being able to manually go through these exercises gives me confidence that I can do these things in the future.
Crystal CleavelandAmerican Registry for Internet Numbers

SEC536: Adversarial AI - Penetration Testing AI Systems