homepage
Open menu
Contact Sales

New SANS Courses Available for Registration

Several SANS courses have cutting-edge new content, and our authors have developed many brand new courses and GIAC certifications. Please see the event pages for course availability, and join us during a SANS Live Training Event for up-to-the-minute training you can use immediately.
View Courses View Events
New CoursesWhat Attendees SayWhere to RegisterLive Training FeaturesLive Online DemoJoin the Community

Cutting-Edge New Courses From Industry Experts

Get Started on Your 2022 Goals

What are your training goals for 2022? Watch the video to hear stories about what SANS alumni thought of their training courses, instructors, and labs.

See how we can help you achieve your goals through immersive cyber security training led by real-world practitioners.

See What's New!

We are continually developing new courses, so you can learn the latest tools and technologies to keep your organization secure.
Major Update
Digital Forensics, Incident Response & Threat Hunting, Cloud Security
FOR509: Enterprise Cloud Forensics and Incident Response
The world is changing and so is the data we need to conduct our investigations. Cloud platforms change how data is stored and accessed. They remove the examiner's ability to put their hands directly on the systems. Many examiners are trying to force old methods for on-premise examination onto cloud...
Certification:

  • GCFR

Course Details
Cloud Security
SEC510: Cloud Security Controls and Mitigations
Today's organizations depend on complex, multicloud environments which must support hundreds of different services across multiple clouds. These services are often insecure by default. Similar services in different Cloud Service Providers (CSPs) need to be protected using very different methods....
Certification:

  • GPCS

Course Details
New
Cyber Defense, Open-Source Intelligence (OSINT)
SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis
With Open-Source Intelligence (OSINT) being the engine of most major investigations in this digital age the need for a more advanced course was imminent. The data in almost every OSINT investigation becomes more complex to collect, exploit and analyze. For this OSINT practitioners all around the...
Course Details
Digital Forensics, Incident Response & Threat Hunting
FOR608: Enterprise-Class Incident Response & Threat Hunting
FOR608: Enterprise-Class Incident Response & Threat Hunting focuses on identifying and responding to incidents too large to focus on individual machines. By using example tools built to operate at enterprise-class scale, students learn the techniques to collect focused data for incident response...
Certification:

  • GEIR

Course Details
Cloud Security
SEC522: Application Security: Securing Web Applications, APIs, and Microservices
Web Applications are increasingly distributed. What used to be a complex monolithic application hosted on premise has become a distributed set of services incorporating on-premise legacy applications along with interfaces to cloud-hosted and cloud-native components. Because of this coupled with a...
Certification:

  • GWEB

Course Details
Cloud Security, Offensive Operations, Pen Testing, and Red Teaming
SEC588: Cloud Penetration Testing
SEC588 will equip you with the latest cloud-focused penetration testing techniques and teach you how to assess cloud environments. The course dives into topics like cloud-based microservices, in-memory data stores, serverless functions, Kubernetes meshes, and containers. It also looks at how to...
Certification:

  • GCPN

Course Details
Major Update
Digital Forensics, Incident Response & Threat Hunting
FOR500: Windows Forensic Analysis
FOR500 builds comprehensive digital forensics knowledge of Microsoft Windows operating systems providing the means to recover, analyze, and authenticate forensic data, track user activity on the network, and organize findings for use in incident response, internal investigations, intellectual...
Certification:

  • GCFE

Course Details
Industrial Control Systems Security
ICS418: ICS Security Essentials for Managers
The ICS418: ICS Security Essentials for Managers course empowers leaders responsible for securing critical infrastructure and operational technology environments. The course addresses the need for dedicated ICS security programs, the teams that run them, and the skills required to map industrial...
Course Details
Offensive Operations, Pen Testing, and Red Teaming
SEC556: IoT Penetration Testing
SEC556 facilitates examining the entire IoT ecosystem, helping you build the vital skills needed to identify, assess, and exploit basic and complex security mechanisms in IoT devices. This course gives you tools and hands-on techniques necessary to evaluate the ever-expanding IoT attack surface.
Course Details
Major Update
Cybersecurity and IT Essentials
SEC401: Security Essentials - Network, Endpoint, and Cloud
Whether you are new to information security or a seasoned practitioner working in a specialized focus area, SEC401 provides the essential infosec skills and techniques you need to protect and secure your critical information and technology assets - on-premise or in the cloud. SEC401 will show you...
Certification:

  • GSEC

Course Details
Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting
ICS515: ICS Visibility, Detection, and Response
ICS515: ICS Visibility, Detection, and Response will help you gain visibility and asset identification in your Industrial Control System (ICS)/Operational Technology (OT) networks, monitor for and detect cyber threats, deconstruct ICS cyber attacks to extract lessons learned, perform incident...
Certification:

  • GRID

Course Details
Digital Forensics, Incident Response & Threat Hunting
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
FOR710: Reverse-Engineering Malware - Advanced Code Analysis prepares malware specialists to dissect sophisticated Windows executables, such as those that dominate the headlines and preoccupy incident response teams across the globe. This course not only includes the necessary background and...
Course Details
Cyber Defense
SEC586: Security Automation with PowerShell
Are you a Blue Teamer who has been asked to do more with less? Do you wish you could detect and respond at the same pace as your adversaries who are breaking into and moving within the network? SEC586: Blue Team Operations: Defensive PowerShell teaches deep automation and defensive capabilities...
Course Details
Artificial Intelligence (AI), Cyber Defense
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595 provides students with a crash-course introduction to practical data science, statistics, probability, machine learning, and AI. The course is structured as a series of short discussions with extensive hands-on labs that help students to develop useful intuitive understandings of how these...
Certification:

  • GMLE

Course Details
    Nobody else in the industry is as comprehensive as SANS or as up-to-date and knowledgeable. If you want to learn how to do your job right, I don’t think there's any better training out there right now.
    Ronald Craft
    - S-RM
    SANS courses are extremely valuable because of all the hands-on material and their connection to the real world.
    Tor Nilsson
    - SecurityLink AB
    The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
    Ryan Moeller
    - Eureka Strategic Consulting
    SANS training keeps individuals up-to-date with relevant cyber security information. I can now apply the skills learned towards further maturing my program.
    Nicholas Marriott
    - Pfizer
    SANS offers the ultimate in quality instruction and thoughtful curriculum development. I learned so much this week and can't wait to review and apply what I learned.
    Gabrielle S.
    - US Federal Agency
    The labs were very hands-on, and being able to manually go through these exercises gives me confidence that I can do these things in the future.
    Crystal Cleaveland
    - American Registry for Internet Numbers

      SANS Live Training Events Featuring New Courses

      Several new courses are open for registration during events occurring in the Americas, Europe, Middle East & Africa, and Asia Pacific. Learn real-world cyber security skills directly from top industry experts during SANS Live Training events featuring interactive courses with hands-on labs, plus cyber range challenges and networking opportunities.
      SANS Network Security 2022 Promo
      Learn real-world cyber security skills from top industry experts during SANS Network Security 2022 (Sep 7-12). Join us Live Online or in Las Vegas, NV to experience interactive training with hands-on labs, practice your skills during NetWars Tournaments, and network with your peers in real-time.
       View Courses & Certifications
      SANS NoVA Event 2022 Promo Graphic
      Experience immersive cybersecurity training relevant to today’s top cyber threats. Join us in Alexandria, VA, or Live Online for SANS NoVA 2022 (October 24-29).
       View Courses & Certifications
      SANS Cyber Defense initiative 2022
      Learn to combat the world’s latest cyber threats with up-to-the-minute training from real-world practitioners! Connect with other professionals in the cyber community at one of our biggest events of 2022. Join us in Washington, DC, or Live Online for SANS Cyber Defense Initiative 2022 (December 12 – 17, EST).
       View Courses & Certifications

      SANS 2022

      Experience immersive cyber security training relevant to today’s top cyber threats. Join us Live Online or in Orlando, FL for SANS 2022 (April 10-15) to learn from experienced cyber security practitioners and practice your skills during virtual NetWars Tournaments. New courses include SEC401, SEC510, FOR500, SEC587, and SEC588.
      Learn More

      SANS Live Training Features

      • Flexible Options: Interactive, immersion-style training available Live Online or In-Person with opportunities to network with and learn from other professionals.
      • Courses on the cutting edge: All courses are designed to align with dominant security team roles, duties, and disciplines.
      • Training from the best: SANS instructors are active security practitioners who bring their extensive knowledge and real-world experiences to the classroom.
      • GIAC Certification: Several certifications align with SANS training courses, validating student mastery for professional use in critical, specialized InfoSec domains, and job-specific roles.
      • The SANS Promise: You will be able to apply the skills and techniques you’ve learned as soon as you return to work.

      Learn More About SANS Live Training

      View a SANS Live Online Demo

      Are you curious to see how SANS Live Online works? SANS Live Online training events offer interactive courses taught by real-world practitioners, real-time support from GIAC-certified TAs, hands-on labs, an archive of course lectures uploaded to your account daily during the event, and four months of access to your course lectures after the event.

      In this Live Online demonstration, you will walk through several lab environments, including labs run in a VM on your computer and remotely accessed labs. You will also see how you can interact with peers, TAs, and your instructor using Slack.

      Join the SANS.org Community for Free

      Membership to the SANS.org Community grants you access to thousands of free content-rich resources our SANS instructors produce for the information security community annually. These resources include immediately useful knowledge and capabilities to support your cyber security goals.
      Join the Community